Static task
static1
Behavioral task
behavioral1
Sample
nanodump_ssp.x64.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
nanodump_ssp.x64.exe
Resource
win10v2004-20230621-en
General
-
Target
nanodump_ssp.x64.exe
-
Size
102KB
-
MD5
dec718460296d5a9b4c4865bc83445af
-
SHA1
6dbd90eb7877a176aae21264bfd1e50d03c110f1
-
SHA256
bdc9a493c92ca26c06ddbe2c7c034543ea58a62d4aa2692c3cad8afddfeea574
-
SHA512
13f938f0a12b412e4b3e0f8af30924e6e014c9fcdf5ba90f05104a3345b92c9d3cecd7ed839f7bd9f096ea9ad597d1e5a3ca548085f2229666942a59fe7485d2
-
SSDEEP
1536:W6xg1lfgUJZjctEVygnlis6JO1Y7JIdJx9gth6S:Xxg1lIgyeoglz6A1Y7JO0thT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource nanodump_ssp.x64.exe
Files
-
nanodump_ssp.x64.exe.exe windows x64
d9d381582566aed57aee97325b3c0510
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeleteCriticalSection
EnterCriticalSection
GetLastError
GetProcessHeap
GetStartupInfoA
HeapAlloc
HeapFree
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte
msvcrt
__C_specific_handler
___lc_codepage_func
___mb_cur_max_func
__getmainargs
__initenv
__iob_func
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_commode
_errno
_fmode
_initterm
_lock
_onexit
_time64
_unlock
_wcsicmp
abort
calloc
exit
fprintf
fputc
free
fwrite
localeconv
malloc
mbstowcs
memcmp
memcpy
memset
rand
signal
srand
strerror
strlen
strncmp
strncpy
strrchr
swprintf_s
vfprintf
wcslen
wcsncat
wcsncpy
wcsrchr
Sections
.text Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 11KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE