nw[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

nw.exe
Size

168KB
MD5

1f04deb7594a0997b2f9de1e393f4408
SHA1

ec50afb4bc79ef3de68ea2ec4ad46aa5da280416
SHA256

e1c23f5afacfeb9b2363c885cc9b68f1a6d8a31f05ca24d14998f79654f49dca
SHA512

9e514863d265c196d4c6dbaf8d64499a1c6e67f36c6de36954c2a2d52f1257d58600cddf97e765e62f3a49bd3e149f5069d6e14334367ce58902e2565d4fd568
SSDEEP

3072:o/6PBlF+t4hTGasuCmp3WWET7SonfJhEZGsPe60/OgaLVbhLu4IyBRB:3BukpCmAW+uonffgG1BeLVbh69ynB

Score

1^/10

Malware Config

Signatures

Files

nw.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ