Static task
static1
Behavioral task
behavioral1
Sample
NicoDrip.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
NicoDrip.exe
Resource
win10v2004-20220901-en
General
-
Target
NicoDrip.exe
-
Size
16KB
-
MD5
0e4e1025f15cb4bebf089082a2b0f4ee
-
SHA1
7a5a58d78878e884ff460a03f43eef159f616e26
-
SHA256
fc0f113025efd6601036a286bd27855f0afcd26bce4a0207ad83c9e7d0e360fd
-
SHA512
18070688eca00a769436ea7f5e4fae603dd76bb5f3b7350ffa067a2bc46f6146fc6a4bbaf39fa257a7b8c5d87698b05d7352e082e0054d36f80194eeda12b309
-
SSDEEP
384:mDuI8XU1nFqpInHmbMKJNa65C4fjVI5GAWaew:iu9MnFPnHCpfakaew
Malware Config
Signatures
Files
-
NicoDrip.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ