Static task
static1
Behavioral task
behavioral1
Sample
NFS2016+6Tr-LNG/NFS2016+6Tr-LNG_v1.04.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
NFS2016+6Tr-LNG/NFS2016+6Tr-LNG_v1.04.exe
Resource
win10v2004-20240226-en
General
-
Target
deadd195157a89ceefbf4416090ae10c
-
Size
1.8MB
-
MD5
deadd195157a89ceefbf4416090ae10c
-
SHA1
05332cd04a91a8712469c0784873c9528b9d93f1
-
SHA256
e371b04b9919f82810dcd3d445d5c249e775b04beaf0cd6412827d9af78ed9b7
-
SHA512
662fe514b066ee8c7ad1100ed2e9fdab7db1fa1a691bba55090b0dadd1724c20e3a4c308955aa2aacd444e4e13377fc747f490666ab56c7a37931d42c90123fd
-
SSDEEP
49152:Nh75gpfje9V2Xsa18Q3p8LG/Oo83tN85WQML3k:77qfj+V2Xsb+UPtNaWQ00
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/NFS2016+6Tr-LNG/NFS2016+6Tr-LNG_v1.04.exe
Files
-
deadd195157a89ceefbf4416090ae10c.rar
-
NFS2016+6Tr-LNG/NFS2016+6Tr-LNG_v1.04 - INFO.txt
-
NFS2016+6Tr-LNG/NFS2016+6Tr-LNG_v1.04.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
NFS2016+6Tr-LNG/VERY IMPORTANT!.txt