NNAs[.]wav[.]converted[.]exe | Triage

Sharing

General

Target

NNAs.wav.converted.exe
Size

759KB
MD5

8c08b9b19a0e91746694a884caef3882
SHA1

1ab71cea96db2445573afe8381baf6f6537c335d
SHA256

cfc4f6c4931fc8df03919d96181178a903a6ccd39eb5268ac00b3a223c027b5b
SHA512

bec4ef8ed9928324387cea8387b8ec1dfcda736c011d2cf70dee23e73be5a935a243739b3af1ad4b00f8a79ce32ce70f6220137ffb9a0d9601f9cb85f4511e35
SSDEEP

12288:ZXGjzVBnCsijTu3P8ol5VBm3Ak7wPYyr/zxarzxlKi+nUwUD8JU8l9WRI6fao6i:0hyjTk0olTBm3AksnrFa5X8Uw5JNH6fN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NNAs.wav.converted.exe

Files

NNAs.wav.converted.exe
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 757KB - Virtual size: 757KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 804B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ