Static task
static1
Behavioral task
behavioral1
Sample
Nord.exe
Resource
win7-20230220-en
General
-
Target
Nord.exe
-
Size
457KB
-
MD5
d4550174e054ffb13487b153ff1853a6
-
SHA1
793d8e4833f99853b7f11decf75508b2c30bf82c
-
SHA256
9bd9cc4e2baf5d47340f1c4e1906289cef6eb1ce07e9889992592baaad5ba759
-
SHA512
9957f5b91a22d8013e6f85cbb46ac1b1501d9fc0df4d05e3e1cbafb855959cdbbad99f36b2a852fbdb64dd398c49cfbbb5c8f64fa5917b1bfbb9937d67d68bb3
-
SSDEEP
12288:3pcMPGVW2eU1KdQnrig69JoIq383K/MkBBN:nS+QnOz3oDZ/7H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Nord.exe
Files
-
Nord.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 456KB - Virtual size: 455KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ