OPENSSL_Applink
Static task
static1
1 signatures
General
-
Target
Nidavellir.exe
-
Size
5.9MB
-
MD5
3564e56a0c6d4224a3014fc718365800
-
SHA1
12c526e0e6315d32c2df3035209257ab997b7b11
-
SHA256
52fe8d0760cdddd0dc175959a843070ac84cc74980e939a6553a1f068de7d34d
-
SHA512
7f2298bb5057394075c42422f10f7e31f72dfc8e87df6d0d817b29c6748e3739e1e5bcf747fce2a18629a1f24477cf7a7c9dabc02b5ef123cfe3ec3c5b50c876
-
SSDEEP
98304:5RTH+/BMh25x7GrvaW4OqoZrD3fltN4S1K6P8qzgI5oQDHKuSYM63BJGGfXX+bX:5Ry5tf/XyrJ4Ss6P8qzviQDHKr6vGGfM
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Nidavellir.exe
Files
-
Nidavellir.exe.exe windows:6 windows x64 arch:x64
b615da15beedabc076bf38655523ba72
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
advapi32
ConvertStringSecurityDescriptorToSecurityDescriptorA
d3d11
D3D11CreateDeviceAndSwapChain
kernel32
TerminateProcess
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
SetWindowPos
gdi32
GetDeviceCaps
ole32
CoInitializeEx
oleaut32
SysFreeString
msvcp140
?set_new_handler@std@@YAP6AXXZP6AXXZ@Z
urlmon
URLDownloadToFileA
imm32
ImmAssociateContextEx
d3dcompiler_47
D3DCompile
bcrypt
BCryptCloseAlgorithmProvider
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memchr
api-ms-win-crt-heap-l1-1-0
malloc
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo_noreturn
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf
api-ms-win-crt-time-l1-1-0
_time64
api-ms-win-crt-string-l1-1-0
_wcsicmp
api-ms-win-crt-filesystem-l1-1-0
_lock_file
api-ms-win-crt-convert-l1-1-0
strtoull
api-ms-win-crt-utility-l1-1-0
rand
api-ms-win-crt-math-l1-1-0
_dtest
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
ws2_32
__WSAFDIsSet
Exports
Exports
Sections
.text Size: - Virtual size: 686KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 165KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.UOl Size: - Virtual size: 4.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.k6$ Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.>fW Size: 5.9MB - Virtual size: 5.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ