KT NV PI[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

KT NV PI.zip
Size

148KB
MD5

7825fdc060e836c20898576ceb6fea3d
SHA1

6aa07c61554ddff7e91ed9af005e72d87d73d656
SHA256

012642b41bb158171bd5ae262cfab9d79a29c97d4e690cc578ca746d06520a3e
SHA512

9842e674d1792bb723af4181579233716d1b0d81cef60a989dcc88399d1836536b84c056e2a737d8133c8ff58b7bc9d2d90cfb6781ff69c45e47abf24d98e58e
SSDEEP

3072:EQNbgVLZ+P3C/dvsXrX7mhLh00nQhx5xiuaI+oJDfvp2DYcBfDD:Eibm+PC/dvszqd002DiDVwfv0DYQDD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/KT Profile I/nvidiaProfileInspector/nvidiaProfileInspector.exe

Files

KT NV PI.zip
.zip
KT Profile I/READ ME.txt
KT Profile I/nvidiaProfileInspector/Reference.xml
.xml
KT Profile I/nvidiaProfileInspector/nvidiaProfileInspector.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 517KB - Virtual size: 517KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
KT Profile I/nvidiaProfileInspector/nvidiaProfileInspector.exe.config
.xml