General

  • Target

    NEXU$.exe

  • Size

    27.7MB

  • MD5

    9f7d0bfe3985c340f42f039fbf9c52af

  • SHA1

    8769d102239db1f9befeaa67b25a7c12ea9ccf2b

  • SHA256

    bf782827fee0c2350eef32b486f7750a530d0e253187f85dd6b52af0b30c8a85

  • SHA512

    988f00c929d7d01b887dc511e586cc75a14180b8b65f34cc293bb998174b667cd488d4e4fc777c183f0c29c744cf649fa520f7265e13486226f3f074cdaf3f81

  • SSDEEP

    786432:TBvc42en9y+aJtShY9Q6SZKb0SReIMrRRMVb:T+cUSG8Zw09YVb

Score
7/10

Malware Config

Signatures

  • Obfuscated with Agile.Net obfuscator 1 IoCs

    Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEXU$.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections