Static task
static1
Behavioral task
behavioral1
Sample
nud.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
nud.exe
Resource
win10v2004-20230915-en
General
-
Target
nud.exe
-
Size
630KB
-
MD5
d6dcea47ad46134b0967962dc1dbe41c
-
SHA1
8311682047b10afb14f5d4594645bc192edc48cb
-
SHA256
958e705777f32549ed903b806754e1258ed85e8c39185b2eb73005692b2da31a
-
SHA512
d23d929a743dbe7671791a39a19e643d65f9435ef8f0f3764193cb7bea7b9e7a29c2fc6e210eea909f729b7230f09d33671e387c8887ab8c49b39cec161fe3b6
-
SSDEEP
12288:CCYecBtGpkCUoRuSyolP1sQV87B1CQCiN/UeF3bRjhD7HNz:9/8GpkboRvl9ss8t1rN8eF3bR9DjNz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource nud.exe
Files
-
nud.exe.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 628KB - Virtual size: 627KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ