NixiusLoader[.]exe | Triage

Sharing

General

Target

NixiusLoader.exe
Size

1.7MB
MD5

6912a8233a9f1eadba03ab278aa232c9
SHA1

137c0b915a4e1b519bb23a1735e155dcaa2eabd1
SHA256

9491ab0aa4778dfaff511cd415d73d968a279ce76aedf68c0aea63352c671245
SHA512

45c240dcb2565c4e478e12f5d815f1cdb2e94d85b901f59786e35e265dba6d1355ffae8907660f642bb307d807b940d2e773385f947fd5951bac965f62762330
SSDEEP

24576:C2JOqc6x8e9T5dN+pZIELCRbuO/2Y5TR+ucfc+S44xQrMUfc+S4:r3c6x8ET5daZ5LUbuOeY5RzxQrM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NixiusLoader.exe

Files

NixiusLoader.exe
.exe windows:4 windows x86 arch:x86

Password: 12345

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

!Sugar
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

!Sugar
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

!Sugar
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

!Sugar
Size: 327KB - Virtual size: 326KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ