Static task
static1
Behavioral task
behavioral1
Sample
Nighty RCE Leaked.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Nighty RCE Leaked.exe
Resource
win10v2004-20230220-en
General
-
Target
Nighty RCE Leaked.exe
-
Size
5KB
-
MD5
2a71b47dfab78b4cd8284f6cf5192fee
-
SHA1
a98ec46c2320d472aeec2c63f5db7185f9d66d28
-
SHA256
061a2757ae7cd8564bb73df49b76e41fdcef3a3aa439bc4eae4b235895cdbb8e
-
SHA512
bc274778e99cbb8ec1c1ae0b00ebb2d88014ca19f372a6459de809f5dbc045e6fe09b71cf4fe362748dd2c9bace397258e7ca5ebad1059e8730e3a52f3b713e5
-
SSDEEP
48:6/aQy26QyIGMFpx8HEGl+GQNMD+wmpcAflmymebHSICC0t0lrqtisaqQ61FGpfbi:ta/ycFq+Gr+wmpj8ymeLH4/pozNt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Nighty RCE Leaked.exe
Files
-
Nighty RCE Leaked.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ