NFC-122-lvse[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NFC-122-lvse.exe
Size

24.3MB
MD5

ef563213240fc718f6cd3bb7a8c7c848
SHA1

107356b6faab83c14895d3cc9810fb04cb13e831
SHA256

c5b7b78e6ac786fb3b4b03da8842222fe09ccdd1f77429f182ab518d4f96917a
SHA512

14e426c9de1ca57f85ea3763649c538facd558ebf81fa4493bfde46eeff5eddabb38b8ef4a8f18a2720d542696a850bac6acff0163ca1a9c78c2c6804ee1c866
SSDEEP

393216:TisV73MdrYxgWS/gZMjfSDWadJsv6tWKFdu9Cb:w4M4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NFC-122-lvse.exe

Files

NFC-122-lvse.exe
.exe windows x86

8ec2e3217565a9b11e58673780d8fca7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreateFontIndirectW
GetFontData
GetStockObject
AddFontResourceExW
RemoveFontResourceExW
AddFontMemResourceEx
RemoveFontMemResourceEx
GetTextMetricsW
GetObjectW
GetTextFaceW
ChoosePixelFormat
DescribePixelFormat
GetPixelFormat
SetPixelFormat
SwapBuffers
EnumFontFamiliesExW
GetCharABCWidthsW
GetCharABCWidthsFloatW
GetGlyphOutlineW
GetOutlineTextMetricsW
GetTextExtentPoint32W
GetCharABCWidthsI
SetBkMode
SetGraphicsMode
SetTextColor
SetTextAlign
SetWorldTransform
ExtTextOutW
CreateDCW
CreateCompatibleBitmap
GetDeviceCaps
OffsetRgn
CreateBitmap
GetDIBits
BitBlt
GdiFlush
CreateDIBSection
SelectObject
SelectClipRgn
GetRegionData
DeleteDC
CreateRectRgn
CreateCompatibleDC
CombineRgn
DeleteObject
GetBitmapBits
CreateSolidBrush

ole32

StringFromGUID2
CoTaskMemAlloc
CoGetMalloc
ReleaseStgMedium
CoTaskMemFree
CoUninitialize
CoCreateInstance
OleIsCurrentClipboard
OleFlushClipboard
OleGetClipboard
OleSetClipboard
CoCreateGuid
CoInitialize
OleUninitialize
OleInitialize
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
DoDragDrop

imm32

ImmSetCompositionWindow
ImmSetCandidateWindow
ImmGetVirtualKey
ImmGetContext
ImmGetDefaultIMEWnd
ImmReleaseContext
ImmAssociateContext
ImmGetCompositionStringW
ImmNotifyIME

winmm

PlaySoundW

oleaut32

SysAllocString
SysAllocStringLen
SysFreeString
SysStringLen
VariantInit
VariantChangeType
SystemTimeToVariantTime
VariantClear
SetErrorInfo
CreateErrorInfo
GetErrorInfo

shell32

SHBrowseForFolderW
CommandLineToArgvW
SHGetFileInfoW
SHGetPathFromIDListW
SHGetMalloc
ShellExecuteW
SHGetSpecialFolderPathW
Shell_NotifyIconW

advapi32

RegCloseKey
RegFlushKey
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
GetTokenInformation
GetLengthSid
FreeSid
CopySid
OpenProcessToken
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegQueryInfoKeyW

user32

SetWindowPos
GetWindowPlacement
SetWindowPlacement
IsWindowVisible
IsIconic
SetFocus
MoveWindow
FlashWindowEx
RealGetWindowClassW
EnumWindows
SetWindowTextW
GetWindowRect
AdjustWindowRectEx
SetCursor
ClientToScreen
ScreenToClient
GetWindowLongW
SetWindowLongW
GetDesktopWindow
GetParent
SetParent
DestroyCursor
GetAncestor
GetKeyboardLayoutList
UnregisterClassW
GetClassInfoW
RegisterClassExW
GetFocus
GetClientRect
GetCursorPos
ChildWindowFromPointEx
GetSysColorBrush
LoadImageW
GetMonitorInfoW
EnumDisplayMonitors
LoadIconW
SetClipboardViewer
ChangeClipboardChain
RegisterClipboardFormatW
GetAsyncKeyState
GetKeyboardLayout
CreateCaret
DestroyCaret
HideCaret
SetCaretPos
PeekMessageW
IsZoomed
GetKeyState
GetKeyboardState
ToAscii
GetCapture
MapVirtualKeyW
GetMenu
TrackPopupMenuEx
SetMenuItemInfoW
NotifyWinEvent
RegisterClassW
GetClipboardFormatNameW
SetCursorPos
GetCursor
LoadCursorW
CreateCursor
SetCapture
ReleaseCapture
GetWindowTextW
GetMessageExtraInfo
TrackMouseEvent
GetCursorInfo
ShowWindow
IsChild
PostMessageW
MessageBeep
GetCaretBlinkTime
GetDoubleClickTime
SetWindowRgn
SystemParametersInfoW
GetSysColor
DestroyIcon
GetWindowThreadProcessId
FindWindowExW
FindWindowW
MessageBoxW
DrawIconEx
TranslateMessage
DispatchMessageW
GetQueueStatus
MsgWaitForMultipleObjectsEx
SetTimer
KillTimer
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
CharNextExA
PostThreadMessageW
MapWindowPoints
GetSystemMetrics
DestroyWindow
CreateWindowExW
DefWindowProcW
SendMessageW
RegisterWindowMessageW
SetRect
FillRect
ReleaseDC
GetDC
EnableMenuItem
GetSystemMenu
GetForegroundWindow
SetForegroundWindow
BeginPaint
EndPaint
GetUpdateRect
ToUnicode
InvalidateRect
CreateIconIndirect
GetIconInfo

kernel32

ReadConsoleW
GetConsoleMode
OutputDebugStringA
GetCommandLineA
FreeLibraryAndExitThread
ExitThread
WriteConsoleW
GetModuleHandleExW
GetModuleFileNameA
EncodePointer
InterlockedFlushSList
GetConsoleCP
SetFileAttributesW
SetStdHandle
GetFullPathNameA
InterlockedPushEntrySList
LoadLibraryExW
RtlUnwind
InitializeSListHead
HeapAlloc
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
VirtualFree
VirtualAlloc
CreateMutexW
ReleaseMutex
HeapValidate
GetACP
SetConsoleCtrlHandler
EnumSystemLocalesW
CreateProcessA
GetStringTypeW
HeapReAlloc
HeapSize
HeapQueryInformation
DecodePointer
SetEnvironmentVariableA
SetEnvironmentVariableW
GetCPInfo
IsValidCodePage
GetOEMCP
HeapFree
GetProcessHeap
FindFirstFileExA
FindNextFileA
IsDebuggerPresent
WriteFileEx
SleepEx
CancelIo
PeekNamedPipe
ReadFileEx
GetUserGeoID
GetGeoInfoW
GetTimeZoneInformation
FindNextFileW
FindFirstFileExW
FindNextChangeNotification
FindFirstChangeNotificationW
FindCloseChangeNotification
MoveFileExW
SetFilePointerEx
SetEndOfFile
GetFileType
FlushFileBuffers
GetProcessId
GetExitCodeProcess
TerminateProcess
CreateNamedPipeW
ConnectNamedPipe
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
MultiByteToWideChar
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
MoveFileW
CopyFileW
DeviceIoControl
GetTempPathW
RemoveDirectoryW
GetLogicalDrives
GetFullPathNameW
GetFileInformationByHandle
GetFileAttributesW
FindFirstFileW
FindClose
DeleteFileW
CreateDirectoryW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFileAttributesExW
GetModuleFileNameW
GetStartupInfoW
GetUserDefaultUILanguage
GetCurrencyFormatW
GetTimeFormatW
GetDateFormatW
LCMapStringW
GetTickCount
QueryPerformanceFrequency
QueryPerformanceCounter
WaitForSingleObjectEx
GetLocalTime
GetSystemTime
OutputDebugStringW
GetSystemInfo
TerminateThread
CreateThread
SwitchToThread
GetCommandLineW
GetUserDefaultLCID
CompareStringW
GetNativeSystemInfo
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
CreateFileW
ReadFile
WriteFile
CloseHandle
GetLastError
DeleteFileA
Sleep
CreateFileA
GetCommState
PurgeComm
SetCommState
SetCommTimeouts
BuildCommDCBA
GetDefaultCommConfigA
DuplicateHandle
RaiseException
SetLastError
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateEventW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
SetThreadPriority
GetThreadPriority
SuspendThread
ResumeThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetThreadContext
SetThreadContext
OpenProcess
GetSystemTimeAsFileTime
GetSystemDirectoryW
FreeLibrary
GetProcAddress
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
WaitForMultipleObjects
CreateSemaphoreW
LoadLibraryW
GetVolumeInformationW
GetLongPathNameW
GetDriveTypeW
VirtualAllocEx
VirtualFreeEx
ReadProcessMemory
GetModuleHandleW
lstrcmpW
LocalFree
FormatMessageW
IsValidLanguageGroup
IsValidLocale
SetErrorMode
ExpandEnvironmentStringsW
CreateProcessW
GetUserDefaultLangID
CheckRemoteDebuggerPresent
GlobalAlloc
GlobalLock
GlobalUnlock
GetLocaleInfoW
LoadLibraryA
GlobalSize
GetFileSize
SetFilePointer
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
WideCharToMultiByte
GetConsoleWindow
GetModuleHandleA
ExitProcess
InitializeCriticalSection
VirtualQuery

hid

HidD_GetPreparsedData
HidD_GetHidGuid
HidD_GetAttributes
HidP_GetCaps

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW
SetupDiEnumDeviceInterfaces

opengl32

glTexParameteri
glTexParameterfv
glTexParameterf
glTexImage2D
glStencilOp
glStencilMask
glStencilFunc
glScissor
glReadPixels
glPolygonOffset
glPixelStorei
glLineWidth
glIsTexture
glIsEnabled
glHint
glGetTexParameteriv
glGetTexParameterfv
glTexParameteriv
glGetIntegerv
glGetFloatv
glGetError
glGetBooleanv
glGenTextures
glFrontFace
glFlush
glFinish
glEnable
glDrawElements
glDrawArrays
glDisable
glDepthRange
glDepthMask
glDepthFunc
glDeleteTextures
glCullFace
glCopyTexSubImage2D
glCopyTexImage2D
glColorMask
glClearStencil
glClearDepth
glClearColor
glClear
glBlendFunc
glBindTexture
glTexSubImage2D
glViewport
glGetString

ws2_32

gethostname
WSAStartup
WSACleanup
WSAAsyncSelect

Exports

Exports

__ptw32_get_exception_services_code
__ptw32_pop_cleanup
__ptw32_push_cleanup
_sched_affinitycpuand
_sched_affinitycpuclr
_sched_affinitycpucount
_sched_affinitycpuequal
_sched_affinitycpuisset
_sched_affinitycpuor
_sched_affinitycpuset
_sched_affinitycpuxor
_sched_affinitycpuzero
nfc_emulate_target
pthreadCancelableTimedWait
pthreadCancelableWait
pthread_attr_destroy
pthread_attr_getaffinity_np
pthread_attr_getdetachstate
pthread_attr_getinheritsched
pthread_attr_getname_np
pthread_attr_getschedparam
pthread_attr_getschedpolicy
pthread_attr_getscope
pthread_attr_getstackaddr
pthread_attr_getstacksize
pthread_attr_init
pthread_attr_setaffinity_np
pthread_attr_setdetachstate
pthread_attr_setinheritsched
pthread_attr_setname_np
pthread_attr_setschedparam
pthread_attr_setschedpolicy
pthread_attr_setscope
pthread_attr_setstackaddr
pthread_attr_setstacksize
pthread_barrier_destroy
pthread_barrier_init
pthread_barrier_wait
pthread_barrierattr_destroy
pthread_barrierattr_getpshared
pthread_barrierattr_init
pthread_barrierattr_setpshared
pthread_cancel
pthread_cond_broadcast
pthread_cond_destroy
pthread_cond_init
pthread_cond_signal
pthread_cond_timedwait
pthread_cond_wait
pthread_condattr_destroy
pthread_condattr_getpshared
pthread_condattr_init
pthread_condattr_setpshared
pthread_create
pthread_delay_np
pthread_detach
pthread_equal
pthread_exit
pthread_getaffinity_np
pthread_getconcurrency
pthread_getname_np
pthread_getschedparam
pthread_getspecific
pthread_getunique_np
pthread_getw32threadhandle_np
pthread_getw32threadid_np
pthread_join
pthread_key_create
pthread_key_delete
pthread_kill
pthread_mutex_consistent
pthread_mutex_destroy
pthread_mutex_init
pthread_mutex_lock
pthread_mutex_timedlock
pthread_mutex_trylock
pthread_mutex_unlock
pthread_mutexattr_destroy
pthread_mutexattr_getkind_np
pthread_mutexattr_getpshared
pthread_mutexattr_getrobust
pthread_mutexattr_gettype
pthread_mutexattr_init
pthread_mutexattr_setkind_np
pthread_mutexattr_setpshared
pthread_mutexattr_setrobust
pthread_mutexattr_settype
pthread_num_processors_np
pthread_once
pthread_rwlock_destroy
pthread_rwlock_init
pthread_rwlock_rdlock
pthread_rwlock_timedrdlock
pthread_rwlock_timedwrlock
pthread_rwlock_tryrdlock
pthread_rwlock_trywrlock
pthread_rwlock_unlock
pthread_rwlock_wrlock
pthread_rwlockattr_destroy
pthread_rwlockattr_getpshared
pthread_rwlockattr_init
pthread_rwlockattr_setpshared
pthread_self
pthread_setaffinity_np
pthread_setcancelstate
pthread_setcanceltype
pthread_setconcurrency
pthread_setname_np
pthread_setschedparam
pthread_setspecific
pthread_spin_destroy
pthread_spin_init
pthread_spin_lock
pthread_spin_trylock
pthread_spin_unlock
pthread_testcancel
pthread_timechange_handler_np
pthread_timedjoin_np
pthread_tryjoin_np
pthread_win32_getabstime_np
pthread_win32_process_attach_np
pthread_win32_process_detach_np
pthread_win32_test_features_np
pthread_win32_thread_attach_np
pthread_win32_thread_detach_np
sched_get_priority_max
sched_get_priority_min
sched_getaffinity
sched_setaffinity
sched_setscheduler
sched_yield
sem_close
sem_destroy
sem_getvalue
sem_init
sem_open
sem_post
sem_post_multiple
sem_timedwait
sem_trywait
sem_unlink
sem_wait

Sections

.text
Size: 16.6MB - Virtual size: 16.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6.8MB - Virtual size: 6.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 285KB - Virtual size: 14.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.drectve
Size: 1024B - Virtual size: 539B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qtmetad
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 782B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.debug_l
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.debug_i
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.debug_a
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.debug_a
Size: 512B - Virtual size: 332B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.debug_s
Size: 1024B - Virtual size: 607B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.debug_f
Size: 1024B - Virtual size: 583B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.debug_l
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.debug_r
Size: 512B - Virtual size: 505B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 481KB - Virtual size: 481KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8ec2e3217565a9b11e58673780d8fca7

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

ole32

imm32

winmm

oleaut32

shell32

advapi32

user32

kernel32

hid

setupapi

opengl32

ws2_32

Exports

Exports

Sections

.text Size: 16.6MB - Virtual size: 16.6MB

.rdata Size: 6.8MB - Virtual size: 6.8MB

.data Size: 285KB - Virtual size: 14.6MB

.idata Size: 15KB - Virtual size: 15KB

.drectve Size: 1024B - Virtual size: 539B

.qtmetad Size: 3KB - Virtual size: 3KB

.tls Size: 1024B - Virtual size: 782B

.gfids Size: 1KB - Virtual size: 1KB

.00cfg Size: 512B - Virtual size: 260B

.debug_l Size: 2KB - Virtual size: 1KB

.debug_i Size: 13KB - Virtual size: 12KB

.debug_a Size: 1KB - Virtual size: 1KB

.debug_a Size: 512B - Virtual size: 332B

.debug_s Size: 1024B - Virtual size: 607B

.debug_f Size: 1024B - Virtual size: 583B

.debug_l Size: 2KB - Virtual size: 1KB

.debug_r Size: 512B - Virtual size: 505B

.rsrc Size: 81KB - Virtual size: 80KB

.reloc Size: 481KB - Virtual size: 481KB

.text
Size: 16.6MB - Virtual size: 16.6MB

.rdata
Size: 6.8MB - Virtual size: 6.8MB

.data
Size: 285KB - Virtual size: 14.6MB

.idata
Size: 15KB - Virtual size: 15KB

.drectve
Size: 1024B - Virtual size: 539B

.qtmetad
Size: 3KB - Virtual size: 3KB

.tls
Size: 1024B - Virtual size: 782B

.gfids
Size: 1KB - Virtual size: 1KB

.00cfg
Size: 512B - Virtual size: 260B

.debug_l
Size: 2KB - Virtual size: 1KB

.debug_i
Size: 13KB - Virtual size: 12KB

.debug_a
Size: 1KB - Virtual size: 1KB

.debug_a
Size: 512B - Virtual size: 332B

.debug_s
Size: 1024B - Virtual size: 607B

.debug_f
Size: 1024B - Virtual size: 583B

.debug_l
Size: 2KB - Virtual size: 1KB

.debug_r
Size: 512B - Virtual size: 505B

.rsrc
Size: 81KB - Virtual size: 80KB

.reloc
Size: 481KB - Virtual size: 481KB