Static task
static1
Behavioral task
behavioral1
Sample
nvxdsync.exe
Resource
win10-20230621-ja
General
-
Target
nvxdsync.exe
-
Size
182KB
-
MD5
c30d18e54b38af1afeaa685c7b39caf2
-
SHA1
fb8ec79d5d8a03fef493fb2ed3f17a8633a67c5e
-
SHA256
c8702b6c90b200576a33cfec2a0f8777cbf47d86e7f4026e9fc9d5e53bbff775
-
SHA512
deb0482edce4f0dc484b276729f4ef9496d29e5f41aca454729dc516b524b46379e4c15bf65589afc3a192fa349ddd832c784f81a0d5b4e595b409af21d643ea
-
SSDEEP
3072:ph7VTphQm/tV3hLKKKKKU8AAFTbp8ELQHsoOJNuYnZIWH2qWUwZr+EM4EIGKEc6M:ph7VTphQjfJXnIZO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource nvxdsync.exe
Files
-
nvxdsync.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ