6ff4d5e331f867bc8bc644ac4b2b38aa7fc796dd13863191fcce3467d5452ad4

General

Target
6ff4d5e331f867bc8bc644ac4b2b38aa7fc796dd13863191fcce3467d5452ad4
Size 458KB
Sample231206-dny3caaf43
SHA256 6ff4d5e331f867bc8bc644ac4b2b38aa7fc796dd13863191fcce3467d5452ad4
MD5 3c0dd24a7b1fc5ea2f56a8dc771f9960
SHA1 b54e184b86b569b3f43ffc2bdd1c55624a50bb84
SHA512 908b7cd4bb69d19fd0313bc1d11f91cbca6f5d551bc2a744179511c8da2e44df201f612324b5db71b635a095f0e776cf34d0bf4b7702059f546e778cdb066a29
SSDEEP 12288:5Tz+p0qIUakJE3iQ6ZeJfTSK7An9/dhiWSI:5Tz+p0qIUakJKixZeZ8/dlS
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Nghgisxtb.exe

File Explorer

6ff4d5e331f867bc8bc644ac4b2b38aa7fc796dd13863191fcce3467d5452ad4

.iso 458KB
Nghgisxtb.exe

.exe 407KB

6ff4d5e331f867bc8bc644ac4b2b38aa7fc796dd13863191fcce3467d5452ad4

SHA256 6ff4d5e331f867bc8bc644ac4b2b38aa7fc796dd13863191fcce3467d5452ad4
MD5 3c0dd24a7b1fc5ea2f56a8dc771f9960
SHA1 b54e184b86b569b3f43ffc2bdd1c55624a50bb84
SHA512 908b7cd4bb69d19fd0313bc1d11f91cbca6f5d551bc2a744179511c8da2e44df201f612324b5db71b635a095f0e776cf34d0bf4b7702059f546e778cdb066a29
SSDEEP 12288:5Tz+p0qIUakJE3iQ6ZeJfTSK7An9/dhiWSI:5Tz+p0qIUakJKixZeZ8/dlS
MD5 SHA1 SHA512 SSDEEP

Nghgisxtb.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 8879bff7f26b389b8d375928fc6095a3847f8602e00822e3f2f67705e2d85cc0
MD5 913aa7a8d382f9195e8057f5592e47a9
SHA1 538ea79a057fb8c0bd4f02c697fbefcffef87947
SHA512 ef731541817fac134955e1e5bd632d78e5ac6b3aa9b148b4a5fb6f1acbda91c397a6f21665d91313a9d41ad2973ac0bd26f6784885f061d30d5e139503eb0ba6
SSDEEP 12288:vTz+p0qIUakJE3iQ6ZeJfTSK7An9/dhiWSI:vTz+p0qIUakJKixZeZ8/dlS
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

421970

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

6ff4d5e331f867bc8bc644ac4b2b38aa7fc796dd13863191fcce3467d5452ad4

Nghgisxtb.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

6ff4d5e331f867bc8bc644ac4b2b38aa7fc796dd13863191fcce3467d5452ad4

Nghgisxtb.exe

mscoree

dotnet