Overview
overview
7Static
static
7nogba-win.zip
windows7-x64
1nogba-win.zip
windows10-2004-x64
1DSI-SD.zip
windows7-x64
1DSI-SD.zip
windows10-2004-x64
1DSI-1.sd
windows7-x64
3DSI-1.sd
windows10-2004-x64
3NO$GBA.exe
windows7-x64
NO$GBA.exe
windows10-2004-x64
No$GBA.com.url
windows7-x64
6No$GBA.com.url
windows10-2004-x64
4README.txt
windows7-x64
1README.txt
windows10-2004-x64
1Behavioral task
behavioral1
Sample
nogba-win.zip
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
nogba-win.zip
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
DSI-SD.zip
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
DSI-SD.zip
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
DSI-1.sd
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
DSI-1.sd
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
NO$GBA.exe
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
NO$GBA.exe
Resource
win10v2004-20230221-en
Behavioral task
behavioral9
Sample
No$GBA.com.url
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
No$GBA.com.url
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
README.txt
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
README.txt
Resource
win10v2004-20230220-en
General
-
Target
nogba-win.zip
-
Size
206KB
-
MD5
9c005f4828eb5c34bada624ac5bb38b0
-
SHA1
934c6aafb61491215208aef5e6a56bbe3ed5348a
-
SHA256
a803011f381522758e8f0bcdbefb20486f6e120c17cd79a66a99fa3a6c03f40b
-
SHA512
34000ca55f713a57e60d1035d9dd3750e0b2b78d39c95d885369bab93213a46c7f3a2b42d2524a72740df46e7d672bc7d5837650ff25dd97a96e37ab02730eea
-
SSDEEP
3072:QmMIXEjsyerpqbP9IHvHZkP6fuMO+2nQUZv9SnYscSqtvR7rhTbvs:RUjsXpqb2ebMORR9SjcSqtv1hTY
Malware Config
Signatures
-
resource yara_rule static1/unpack001/NO$GBA.EXE upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/NO$GBA.EXE
Files
-
nogba-win.zip.zip
-
DSI-SD.ZIP.zip
-
DSI-1.SD
-
NO$GBA.EXE.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 164KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
No$GBA.com.URL
-
README.TXT