NGHL_Full_v1_34[.]exe | Triage

Sharing

General

Target

NGHL_Full_v1_34.exe
Size

187.6MB
MD5

1a99a97a7f6309daad549264b1e8734c
SHA1

6bb8de2a66be4dc71a57a6fb8e5b592da2119193
SHA256

1dd5715962d40dc72242892ad0f15d05833cd7e865bc9b75265e9b450d7b13e3
SHA512

4716124e01ce6d382f2f8bf885bbbb4f034156866fffa754a4f65a05b39dc6083e2db0e0b4b7ac1d5d8cb4c5171491f46765a2084475b8d5c07ae24de2f04a92
SSDEEP

3145728:IOuluB9KY6GsDnRV13Bcb3i9YTHZfLvIh5X+JsRPG6+nZ6HQt8xUtTMOGDXgNb0g:xuUPK7JDnRV16jkYTHZTvI9qnwQt8uA0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NGHL_Full_v1_34.exe

Files

NGHL_Full_v1_34.exe
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ