C:\Users\kumi\Desktop\projects\WpfApp1\WpfApp1\obj\Debug\WpfApp1.pdb
Static task
static1
General
-
Target
Nebula Nuker 1.1.exe
-
Size
1.6MB
-
MD5
8bb160679334d2c8116179a29a663847
-
SHA1
8573ce2b309e24e63024e6a9e183a66ae47d3353
-
SHA256
9b70aa21e3cc372074b35ff0c82e712e3e055bb3cf7ac79591dc4eb110c74f6d
-
SHA512
295d8bcc39ed1fb4a6ce0024a362e796012ac26f49786b51dbc2621a2f2bb5db5124be3f19666f5f7b9b46dc5e868b4923be294d92d7aef3d1127aff0caa5af7
-
SSDEEP
49152:rB4gq/DiBvU/1UeJV/tgtnPOqyeOHEPn5fqeAWNko:VoDii/e28PF5fqerNd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Nebula Nuker 1.1.exe
Files
-
Nebula Nuker 1.1.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ