Nostale - DPS Counter[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Nostale - DPS Counter.exe
Size

46KB
MD5

9f6e51d5d366f5511bd3e0fd258e59d9
SHA1

a749b82f1dbce2a7de453606c2d41722fdb433ef
SHA256

cbbf3b59acd1b7101962a4170c91ac046cef194a8c7cca208a58abcf609f0a77
SHA512

ae8ce8574c5b88432ccb0ad85af5427684414a78e763b6a59430de3540d1fef28e47c8fb51367650dd985f447bf1503fe59ed8e5b8c7593b8435aec27575cdef
SSDEEP

768:x+uJKu49tChx38fwv1Aq/dX/368MKl9tIPpslSt9RoODA8nImn+qpftjefYyRWjr:xzJKT9tChx38f3q/JXPtIPL9RDn38+8K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Nostale - DPS Counter.exe

Files

Nostale - DPS Counter.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Luca\source\repos\Nostale - DPS Counter\Nostale - DPS Counter\obj\Release\Nostale - DPS Counter.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ