Tmxfrfzwvv.pdb
Static task
static1
General
-
Target
nice.exe
-
Size
1006KB
-
MD5
ba9260ff4088678460bb9a6c4ce980c3
-
SHA1
8395256189a6c4dc24a99c4acfa51deca7883f86
-
SHA256
a3a604dda1fd7668930f766d878a0b3204a531f3f57fc45fe22c10fedf83f137
-
SHA512
499ce455a84a464a3d82b3b7e1d7518b890aa40de65e075652de07f5a45b833c4f990de61a893a35d6c850891ba615e59755d496b328b857f9286d21dd6a31ef
-
SSDEEP
12288:CV8WLJN/wI8WBDJdzDTMSnnClf0LKyBZ0Gl3K4ejfq1244jbmCevV252EjK7:CRFwI8WVnCN0LKSn3zeTEiWCevo52Ej
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource nice.exe
Files
-
nice.exe.dll windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Sections
.text Size: 1005KB - Virtual size: 1004KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 828B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ