Static task
static1
Behavioral task
behavioral1
Sample
NeverLose.exe
Resource
win7-20240419-en
General
-
Target
NeverLose.exe
-
Size
861KB
-
MD5
b1433c1f8d80a17def9bca1cebcfe934
-
SHA1
d1a80b4224c19aaf1368aefa48894aa230790468
-
SHA256
94de3563f5ae124248c2fa0ef91d840e8472ce924016bc0d67df4625e1a89bee
-
SHA512
a3bb916d61c8dfe714b91ee3c6bed240260c904e1597d856d9ef001ac4a029696ab042ddf66daa31c89e1c1f02ebb5e841ae73117c6f3849d753fbc756c516d7
-
SSDEEP
24576:m+y8q+/Tz8UG4DQIKcqhHeXmGHdkZ3lE2jgi:m+y8q+LM1IKmmG9k9lE2jg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NeverLose.exe
Files
-
NeverLose.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 856KB - Virtual size: 855KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ