Static task
static1
Behavioral task
behavioral1
Sample
NSo31cV9jvneo.exe
Resource
win7-20230824-en
Behavioral task
behavioral2
Sample
NSo31cV9jvneo.exe
Resource
win10v2004-20230703-en
General
-
Target
NSo31cV9jvneo.exe
-
Size
545KB
-
MD5
dd78beb82258895e2df311d85ba0eec2
-
SHA1
4a48b43e16a1e778e66a28eecaa5ed6d31b6f289
-
SHA256
07ba95864b6e2382f5c5d8b41c2ff926875f9cc50191b444ee3dc2656e50b02f
-
SHA512
a636d7907d6561ccb692d4f750e5d1ef360b12bb7ef8d859a20b8dbbfaf8fe806f44c73b2bbc00a5ae09103400d8d7f7a26ef41ef1fadd45d54f2e315deb6140
-
SSDEEP
12288:bgYycCxdf4lrCs5vYSkgJUKW9O4w0DyV2jde9ybgVafwEbn0fPrZ:rC74JxWSkgJKXZgVaoE2zZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NSo31cV9jvneo.exe
Files
-
NSo31cV9jvneo.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 543KB - Virtual size: 542KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ