Static task
static1
Behavioral task
behavioral1
Sample
NBYS AH.NET.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
NBYS AH.NET.exe
Resource
win10v2004-20231222-en
General
-
Target
NBYS AH.NET.exe
-
Size
3.2MB
-
MD5
4dfd2eddf1d5d5271a371c754e6bed18
-
SHA1
d116ebfaec0adcd029edb4de52fc59f030529493
-
SHA256
b9cf02081d06c962e8fdf78a103f8778a4dcb306f70e167a6962497a7bf8265d
-
SHA512
52d467e43162bb471a3f9bf078cef7b6376b3b6812028898cb414274a23290914dcaad5b8cb6d39a48cd56b0b4ac1cac881abe54937645d1b390d09c902a4ab1
-
SSDEEP
49152:sHXY1n2+5ZB3E1m8UhIEr88f+ymc88HGOIdpPqNq/diFqDe+l4m3a:Kqp5H3em8UhLRft8ZxPqLFqDew4m3a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NBYS AH.NET.exe
Files
-
NBYS AH.NET.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ