BZtI.pdb
Static task
static1
Behavioral task
behavioral1
Sample
NNvx4SRO575DPub.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
NNvx4SRO575DPub.exe
Resource
win10v2004-20240221-en
General
-
Target
NNvx4SRO575DPub.exe
-
Size
810.6MB
-
MD5
fe4dec82b50d1bd5c3d7b05f592efa66
-
SHA1
288f32c2011afacd6f035050e61197b35bb884cb
-
SHA256
eb877dbdd5d10952583cf080132a6308dd64badabe93be2065d2367601ea5f4d
-
SHA512
6f4ea2952603374b91d35bd487ac0e905b2d7e43b0a5722f12ac092a169b491ac93542c218901066694371cea287f1f3e8096a84cd3224030fa46fca51270138
-
SSDEEP
24576:h2nOKRNrz5F/n2oiIcOjrtAgXzL68eEb:EnOaz5Nn2oiIHj2qzteE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NNvx4SRO575DPub.exe
Files
-
NNvx4SRO575DPub.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 733KB - Virtual size: 733KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ