D:\문정일__\신규프로그램버젼\문정일 원본 소스\앉돈자\앉돈자솔루션개별판매소스\NEW_SOLUTION\NBOA_SRC\NBOA\obj\Release\NBOA.pdb
Static task
static1
Behavioral task
behavioral1
Sample
NBOA.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
NBOA.exe
Resource
win10v2004-20240412-en
General
-
Target
NBOA.exe
-
Size
564KB
-
MD5
ce38c61ffbe1721916d4a279b13999ed
-
SHA1
14b99d4ffdcc1774e93c374bcbcdb11688a93aad
-
SHA256
558ae85935bc3f03a908d8bbcd1d5ac3f4c85965e4ca76067cab05df0cc285bf
-
SHA512
baafc73213dafcd4d6d76f18acdedd8f098a1f3435575789872c660d7d8f85c7ca2339ded4985ef9561a65c384aea74df6fb1099c0bb5078d9ed89ea17ac8dbf
-
SSDEEP
6144:bydMeD5XvOqfNTO9Wm/EV9wK9Ilz215pfNTOBfNTOhfNTO:bydMeD5XvOoNeMVmytNoNiN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NBOA.exe
Files
-
NBOA.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 458KB - Virtual size: 458KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ