D:\문정일__\신규프로그램버젼\문정일 원본 소스\앉돈자\앉돈자솔루션개별판매소스\NEW_SOLUTION\NBPM_SRC\NBPM\obj\Release\NBPM.pdb
Static task
static1
Behavioral task
behavioral1
Sample
NBPM.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
NBPM.exe
Resource
win10v2004-20240226-en
General
-
Target
NBPM.exe
-
Size
671KB
-
MD5
939fcd1a61ef4317b17055bb49bea283
-
SHA1
da3010af8b41f3f63fce8cfe3fbc40297bfd3064
-
SHA256
c8e6003271b44e5f914fe282d184ab6c94b82869cf6677b9d97e3a0186c6744c
-
SHA512
bac6d0d5ab45a816d58f538df2b2f94019ef1bec143cdd1a1490e16ac968a712702e1fc60370bbc81284a3115b92d92252fd81b4bda628e870159eda12870c71
-
SSDEEP
6144:sojtCYlOQ+fNTOjfNTO9Wm/EV9wK9Ilz215pfNTOBfNTO0fNTO:/DlOQ0NwNeMVmytNoNxN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NBPM.exe
Files
-
NBPM.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 565KB - Virtual size: 565KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ