NLDDB-082-8232023[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NLDDB-082-8232023.exe
Size

106KB
MD5

1d95f419f8d8d29f923fc62d18a1dea9
SHA1

89fcedb4b9d04f169a1be54a8c18769f3a1ffb32
SHA256

06408113ecebbf603255fb28db23c3dce8feff08089fdf626ae2d59edd72cddc
SHA512

d69180c3064c92a68302ba2d0760afc862567d9e5128f8702ced1c1ff265522d19d97950689e6a82ce0be867253d0479d34de2212d9900aca8405c03bb7151dd
SSDEEP

1536:LVX8QI8TCvziY+qhF8JcaVp73cMj9L2GWEFDpegNI6mlk7URKZdHFO6tVJs/hJys:JsgAFK7MgMOqu7E+bbVOwA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NLDDB-082-8232023.exe

Files

NLDDB-082-8232023.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ