Static task
static1
Behavioral task
behavioral1
Sample
9a39e9f69780a5c38628b9ef94cc8309c9ebb4272f837b19ed2fc09da998154e.exe
Resource
win7-20240221-en
General
-
Target
9a39e9f69780a5c38628b9ef94cc8309c9ebb4272f837b19ed2fc09da998154e.exe
-
Size
181KB
-
MD5
7465d871f23a705db0b2b6730c74e786
-
SHA1
780d13eedd18f6646d1d9fda46b7dd55d9244575
-
SHA256
9a39e9f69780a5c38628b9ef94cc8309c9ebb4272f837b19ed2fc09da998154e
-
SHA512
8c5588fc38283f18da703ac23fd90ac9f52b57c2b51667de35967c2a8dae37fb25008469c13153217f4712298a8a4d75e7a2743fb4f668668dd8efb12e5dcb25
-
SSDEEP
3072:QQW8lTQY0ndQZn/jJtILH4htDcS9uG55keLiwRZhEAxHpvhcOjD9dwj+ltu:17TQXndQdqHAlcS9uGZLiwj7JvhcOjDs
Malware Config
Signatures
-
Detects .NET executables utilizing NyanX-CAT C# Loader 1 IoCs
resource yara_rule sample INDICATOR_EXE_Packed_NyanXCat_CSharpLoader -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9a39e9f69780a5c38628b9ef94cc8309c9ebb4272f837b19ed2fc09da998154e.exe
Files
-
9a39e9f69780a5c38628b9ef94cc8309c9ebb4272f837b19ed2fc09da998154e.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ