NohBoard[.]exe | Triage

Sharing

General

Target

NohBoard.exe
Size

834KB
MD5

b7b5bf53f5394400acdc6f3c04130227
SHA1

606be1bfdc944732e2f31f555180e7adc86db301
SHA256

8df2babaa8c93c6012f7474a019854c1ac6cdada88a4a4e9c5a8c6e593efe70d
SHA512

9d1d8cbf4c7af84b70b45d071d049fb01a9fbaf21f2b3d7915e90dc8097f03933d89c1fb5a5595894efb1345a9993dd4b413df605de887ee3a80c2c4cc488472
SSDEEP

6144:3bUk4w/ECvdaOrjUbqDXsIv1YAydSSq+xp+OJYuelZFel6:rUG/EC7HUbdI90o9j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NohBoard.exe

Files

NohBoard.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\projects\nohboard\NohBoard\obj\Release\NohBoard.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 506KB - Virtual size: 505KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 327KB - Virtual size: 327KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ