Nano[.]exe | Triage

Sharing

General

Target

Nano.exe
Size

306KB
MD5

01beaefb0f56383b0c2906619fc03f19
SHA1

a1d497953866f1dbd3ba0693343b65fa953698ea
SHA256

1fdf23401a81a5b558b87e91316f8104167fa88d6a849a17d1dc4f372582ef6a
SHA512

b4673199c38a445c213d656dc263a859101f42ae0bbda7a64566ec2e61bf7416cecf7ef0460a8b888726097ea1db06956495d460131cc66b412f655592645269
SSDEEP

6144:xAcg/1XlGfcRTYFDtKUbVS4fi2na52fnoBAyc5edsb1Om:Scg/GEV4KySaa5VBF6edsb1Om

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Nano.exe

Files

Nano.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

cPVv+QV
Size: 267KB - Virtual size: 267KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ