Static task
static1
Behavioral task
behavioral1
Sample
Trainer_NFSR_1_1.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Trainer_NFSR_1_1.exe
Resource
win10v2004-20230703-en
General
-
Target
Trainer_NFSR_1_1.exe
-
Size
62KB
-
MD5
1d64d7357f6e9f27b0830e4fbb1914f7
-
SHA1
886e8a62c7f1f8aa27604529a4545817512148fe
-
SHA256
f6918615d557a3c4ba14dd633608b2d4d0ec07ea89d52a4bf0fea24b11b86c93
-
SHA512
bde0b0d706c7c143a78e4d75f3b0ce9912efa29027d3cbbe18cf40b2cc3384d8d3e7c1330f717b75dcea524b2615e96126c7c58a34dd27f622d85f801d93b412
-
SSDEEP
1536:NWBayhhz23J4g+qulRJAwikbgBjZAt0MdcCJQNIyX:NoxhdS3ylRKggCtKpX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Trainer_NFSR_1_1.exe
Files
-
Trainer_NFSR_1_1.exe.exe windows x86
Password: asd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE