Static task
static1
Behavioral task
behavioral1
Sample
NI License Activator 1.2.exe
Resource
win10-20240404-en
General
-
Target
NI License Activator 1.2.exe
-
Size
1.5MB
-
MD5
98af0f5efc8aa1e2b81db6eac5cbcaaa
-
SHA1
ee4b19a4f4f802acd404d5efdcd62699778b902f
-
SHA256
1e421829e8a79f4dafae3970bffc456f0e2cdf3cbe3c4bdfe711ddad376cdd0d
-
SHA512
de0bf791981500222bfc907cb8833e35f802bf24663d44e90f31b971e437151a7e7187e55c2f9160de94fd29d4bc385b5bc8041c3b74105be8852ae8615432d3
-
SSDEEP
24576:jjmGrIfaOA1jBmin57NJseGS7Lh0ElHpsFtmBStdq8aG9o92llBVZFgdCWbkILLp:jjmGrIfaOuNTn57Hsexh0+svdp3Fgdz5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NI License Activator 1.2.exe
Files
-
NI License Activator 1.2.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
CONST Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 94KB - Virtual size: 406KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ