Nihon[.]exe[.]bin | Triage

Sharing

General

Target

Nihon.exe.bin
Size

12.7MB
MD5

26b058dde37aedb08da5bb55fb38570e
SHA1

d3bd14485f02571243540c6df24fa8fb5ac00d00
SHA256

5c2575405d4d2c904ae43fa36a5787999f334f531b7f1d1a43028369ba9368c6
SHA512

32c6c21401241b024a912c47790a716f580796822e97a2842b61067d5b0b7f916314be3a721b5901d1184cd49a608ad63bb26fdeea682d8c81e820b562d9980b
SSDEEP

196608:kuMJHRhINicdkxGnOICwuY+5F4XUJGPrjMxQZEPdlO+si:kRHVcdkx3ICw8IEUj5klt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

Nihon.exe.bin

Files

Nihon.exe.bin
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\conno\Desktop\Visual Studio Coding Project\Nihon Project\Nihon\Nihon Interface\bin\Debug\Nihon.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12.7MB - Virtual size: 12.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ