Static task
static1
Behavioral task
behavioral1
Sample
NUS Downloader.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
NUS Downloader.exe
Resource
win10v2004-20221111-en
General
-
Target
NUSD-Mod-NUS-Fix.zip
-
Size
155KB
-
MD5
2319b8d580e45f23d8c5f5a645ff6341
-
SHA1
c395ce887b2337c5af495c61fd1860716fe56513
-
SHA256
971a96fe8851a5fa422d52287e15c309bd3e792b8c2ebc83df46fa6dcf4eb43d
-
SHA512
a43d41881983b78ef9fd42c0fd477210b64db060756ea90218179857154a376d1756947a07c59dba2d089809a4b4b3d6f79f347748bf618a3c9e7c9f67d55016
-
SSDEEP
3072:8G6kv0miyz3I031La9XvzQv+0JYFw2vyaghRjlgnOlYg5VSxxVLes:j6pmNz3I0Qpkv7+wHagh8neYgX45D
Malware Config
Signatures
Files
-
NUSD-Mod-NUS-Fix.zip.zip
-
NUS Downloader.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 355KB - Virtual size: 354KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
database.xml
-
dsidatabase.xml