Static task
static1
Behavioral task
behavioral1
Sample
NolvusUpdater.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
NolvusUpdater.exe
Resource
win10v2004-20230221-en
General
-
Target
NolvusUpdater.exe
-
Size
26.4MB
-
MD5
5836fd7542ae9266e88c9f43c71c930c
-
SHA1
6ea4cb6cc981c7c490bdd0dd265966bcecc78ca2
-
SHA256
fd80be8d89c239f8bb7ad5fe330cb3abe7cfbefc7aeb7e64d806631fffb2f796
-
SHA512
2d11b72a9319b6d41fa8d93045bf2eff576750abdfcdc0f47d2c7ee103fb3386a41908327b6e5b9ace3773e55b2bddfe5e7a7f9a5807a7e48b70ad4fe0b37961
-
SSDEEP
393216:tDiUt2CzmoNFpyKisWCV7MuVvuxv8L+iQvzNNX:AUt2Cqapy6WNU7KzNNX
Malware Config
Signatures
Files
-
NolvusUpdater.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 26.4MB - Virtual size: 26.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ