Nature[.]VersionTool[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Nature.VersionTool.exe
Size

8KB
MD5

2a7d5fb8eb9777e60cf273c673912cca
SHA1

023424a2788a92b2ed517a1a189e18798b05a775
SHA256

3669931eac18f598fda649cc9a851deb643eb291d3ba45e2469c37349c3024ac
SHA512

295fa7eb691d02f228847648a9bd4f34678036ab6dfe738d9eeffa8d2db6ebc0318ef7fca29ee27f09bfc6c072a56b316bf85c988f857a2754cec8b359ce5c01
SSDEEP

96:Xp+/TMNF4m6fEjJEvWllvzbFRhDWdsXTwQOd+8/YQthin5s90gvIqYI7UHK7zNt:CwHV6/Oz74dsD2/YQtrGgvIqY0UHKd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Nature.VersionTool.exe

Files

Nature.VersionTool.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ