Static task
static1
Behavioral task
behavioral1
Sample
NGL-V-8021-PI-QP-1803-D6.rar
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
NGL-V-8021-PI-QP-1803-D6.rar
Resource
win10v2004-20240508-en
General
-
Target
NGL-V-8021-PI-QP-1803-D6.rar
-
Size
705KB
-
MD5
310cde55abdb1c127df759e181701a25
-
SHA1
96ad2f8710f7f9747c35b5e72f39e1916b20d1b9
-
SHA256
cb39cede764ff79eb9973d3b358dfec77771fb5f52a76f8ca298c4938151de99
-
SHA512
0432d37b0f6227f76e53ede5f08c77abd907ea922df8451fbade5b80db72f35fa6afd641159ad25c8ccdd05ea8d08343a387633ce64cb966684b790a7374a7e8
-
SSDEEP
12288:p2fHCPgW2UzYytw+1V9ehvGsXwMepqqw44boXeywkwZoUvCg5PiM72niW3:p2fHZWlXHbLsXxepqqw44boXedkh8Cg8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/NGL-V-8021-PI-QP-1803-D6.scr
Files
-
NGL-V-8021-PI-QP-1803-D6.rar.rar
-
NGL-V-8021-PI-QP-1803-D6.scr.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 705KB - Virtual size: 704KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ