NSS[.]exe | Triage

Sharing

General

Target

NSS.exe
Size

642KB
MD5

876db5122f5ecb90acc915cec4c89810
SHA1

4dcedd113292812c0ef832640f3e964eec73c289
SHA256

d04380b79524da697074a01b0af3809f881d0fb09a68364083aeb7a1be021249
SHA512

f2813727b0f813cad1638d58aedc03caff7c649f4da5af7ef8161c2826e0a5d9526cf30fb19d94e982dae8d66615ef5f735f691d0f23cf1a601bbc87a9eaf2b8
SSDEEP

12288:9sJTENl3zT882MF7D9mDSwXhblVpFSgW/MiMJRmDch58dbP1PIPcZpCDzep:+xENlDoMF7DUVRlVfSgEr3DE5eZAw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NSS.exe

Files

NSS.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

LFIo.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 639KB - Virtual size: 639KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ