d:\AA - ARQUIVOS NITGEN\AA - Skin\NBSP2Por\Debug\NBSP2Dummy.pdb
Static task
static1
Behavioral task
behavioral1
Sample
NBSP2Por.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
NBSP2Por.dll
Resource
win10v2004-20240426-en
General
-
Target
NBSP2Por.dll
-
Size
1.4MB
-
MD5
060c84397a9401e12df002958d382079
-
SHA1
d785449a36e3b57ecb086f17c41c174e582e224f
-
SHA256
2e863caa487f98b9b13343d664859807d653b0f9d009e784b1aa9c2735cac256
-
SHA512
25dbe41137cbbdc437b2e9737c01437f86e8745a7d35405d539e01c43f4ca7100b3f188f834b30797c8df5937a6791028e9b1ecf7b408d46aaac55d52161589b
-
SSDEEP
12288:0DIcgFvdfUbQITxDvbgob/H+hmwDgdkAlE4OES0m6pP6vfItefDtU0pYJpgqF+mG:0DIvEMH0hDM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NBSP2Por.dll
Files
-
NBSP2Por.dll.dll windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Sections
.rdata Size: 4KB - Virtual size: 116B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ