Static task
static1
Behavioral task
behavioral1
Sample
nat.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
nat.exe
Resource
win10v2004-20230220-en
General
-
Target
nat.exe
-
Size
2.0MB
-
MD5
8053e44a2a99c9428597c57f6fe6c1ec
-
SHA1
28af7cabd1ebb7ddfab87b1002141214fca79866
-
SHA256
fe3ccff6c0edb4aa937583af5bb2222216a642762d9a4c802315e775fc41d8b4
-
SHA512
0fde02ff4145342ca4a165ffaad670381452c8c04be3cb109dcf45d192c1b5968c56370d99bbf4a8d142436fdc3521822e9529e865daa9ec797ffb1098cf8440
-
SSDEEP
49152:qjiKmQ907CvYXE0eN1V/hpR5MtAxToDF0Bt4XnPs:Si+07CvWeN1VZNAWoB0Bu/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource nat.exe
Files
-
nat.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 162KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ