Static task
static1
Behavioral task
behavioral1
Sample
nellyzx.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
nellyzx.exe
Resource
win10v2004-20230703-en
General
-
Target
nellyzx
-
Size
576KB
-
MD5
fc7ab7f0b03e4c4ea5c3315736328dd4
-
SHA1
3cd67957a043d5d5d824aa65bee6eab163cff5b1
-
SHA256
a636769bcc6e11b5a9be209faa164fc778df5ee6e34ae53a6eeb440314f79929
-
SHA512
89ab0a1207e34fee3c3242f300116b59748264ea839404d7da7932d0a08918263a594bceb1b0fc49880795130af2bfc2278d5deb69985fbd1190002624854048
-
SSDEEP
12288:g9J8Bs0b3AU/4K6HivrnChdeKe4x3lqhuobhfryFH1:g9y0hKSxdRrqEoblryFV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource nellyzx
Files
-
nellyzx.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 573KB - Virtual size: 572KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ