nanodump_ppl_dump[.]x86[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

nanodump_ppl_dump.x86.exe
Size

135KB
MD5

414c0a64ae5a06e4b0e3d4caddbb09d2
SHA1

ab62e8d4ea32086c22ffa39db341cc453af16fe9
SHA256

f8a549fd58b410dda97a91dd1f285efc3d9cff406e1d49ea98c2d7f092caed2a
SHA512

5d60b313e130634bd19342e250c8e8ade8a7127a3c53c950f1d956a8c48aeffd4d8ee93a77f47a8bf355de26cdbf260e6363e0405169a1b5d128b4c7585ebea2
SSDEEP

1536:rzwzlVbiMWAMedXyrZ0VYqgQoln7oZmkwLOsZ4tea/PE6bqB:WXMXV0a3QA7oZml4y6w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
nanodump_ppl_dump.x86.exe

Files

nanodump_ppl_dump.x86.exe
.exe windows x86

cde8459e3427be09f98853e750be3ee6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessHeap
GetStartupInfoA
HeapAlloc
HeapFree
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalFree
MultiByteToWideChar
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

__getmainargs
__initenv
__lconv_init
__mb_cur_max
__p__acmdln
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_errno
_initterm
_iob
_lock
_onexit
_unlock
_wcsicmp
abort
atoi
calloc
exit
fprintf
fputc
free
fwrite
localeconv
malloc
mbstowcs
memcmp
memcpy
memset
rand
setlocale
signal
srand
strchr
strcmp
strerror
strlen
strncmp
strncpy
strrchr
swprintf_s
vfprintf
time
wcscmp
wcslen
wcsncat
wcsncpy
wcsrchr

Sections

.text
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cde8459e3427be09f98853e750be3ee6

Headers

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: 63KB - Virtual size: 62KB

.data Size: 57KB - Virtual size: 56KB

.rdata Size: 6KB - Virtual size: 6KB

/4 Size: 5KB - Virtual size: 4KB

.bss Size: - Virtual size: 9KB

.idata Size: 2KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 52B

.tls Size: 512B - Virtual size: 8B

.text
Size: 63KB - Virtual size: 62KB

.data
Size: 57KB - Virtual size: 56KB

.rdata
Size: 6KB - Virtual size: 6KB

/4
Size: 5KB - Virtual size: 4KB

.bss
Size: - Virtual size: 9KB

.idata
Size: 2KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 52B

.tls
Size: 512B - Virtual size: 8B