nahnhh[.]zip | Triage

General

Target

nahnhh.zip
Size

495KB
MD5

df42a80240defb35d4b8b981e960b42e
SHA1

b15b12cd802006d36d9f93eaf45684b948afdaf5
SHA256

6bfb6cfb88c566ec69058f70170b8c143134cef215de859eda6e9e9fd1e5c521
SHA512

a0bdf720346d2706564006b17a7a81bc77c3b137af4c44929f0df3e63b742b360ee95a63865d96e9b055face31e1781807655a0ac448eeb58aec2b6e3d9600df
SSDEEP

12288:+BF4FeiOH5ER0xS7+hSXoto37BF4FeiOH5ER0xS7+hSXotoNhc:+P4GSR5LX/7P4GSR5LXFhc

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/nahnhh/nowaijajaj.exe
unpack001/nahnhh/nowaijajaj2.exe

Files

nahnhh.zip
.zip
nahnhh/nowaijajaj.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Projects\VB.NET\MEGA VIRUS MAKER\Backup (MVM)\Last known works DO NOT USE JUST COPY AND USE\Application (MVM STUB)\Application\obj\Debug\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 300KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
nahnhh/nowaijajaj2.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Projects\VB.NET\MEGA VIRUS MAKER\Backup (MVM)\Last known works DO NOT USE JUST COPY AND USE\Application (MVM STUB)\Application\obj\Debug\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 300KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 300KB - Virtual size: 300KB

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 512B - Virtual size: 12B

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 300KB - Virtual size: 300KB

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 512B - Virtual size: 12B

.text
Size: 300KB - Virtual size: 300KB

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 300KB - Virtual size: 300KB

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 512B - Virtual size: 12B