NPLoader[.]exe | Triage

Resubmissions

29/05/2024, 14:24

240529-rqn7taaa69 3

29/05/2024, 14:17

240529-rlxcmahh52 3

Sharing

Copy URL Twitter E-mail

General

Target

NPLoader.exe
Size

1.8MB
MD5

8a79a0d7d4cc14361bace764a5a1e087
SHA1

fae7801bae80b4bd28359c17db560823d18e36eb
SHA256

d999bc4f9296f1747162ca7ebfc3d28f057ec5b8c6f146a2341950a6bf133056
SHA512

73d1bd134b4225cb425188d49c8838c4f6b9f8451e34c3e4577d09c117904cfa31a1419ae6aa4e3ddeb442f1077835bef84733336ec864823666fd489545990b
SSDEEP

49152:5aMsaIAou6h2DdPzIaMsaIAou6h2DdPzf:Ku6hidPzvu6hidPz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NPLoader.exe

Files

NPLoader.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Gojov\Downloads\NPLoader\obj\Debug\NPLoader.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ