Static task
static1
General
-
Target
NXOV3OBF_NoTrialByJ.N.dll
-
Size
1.1MB
-
MD5
92bf55801a9ae4fc638bedb0a7353d7f
-
SHA1
8b43c06a0b103b132967788723dd769bac87997d
-
SHA256
87cd14b6070abeeded7cdc55eae65a6c10c336b661a9b3b0b97d247feffeda61
-
SHA512
3af33ab1f00b40c50fc87dcb521f3ee6350df6a157b142d1f025e9c06bc627b8049fc72bafac0c893f303d819fc0a5ef8570310dfdf2d0cd590ce889bcce52bd
-
SSDEEP
12288:CRz0s9Py9IY+8NPXJr5MWhYVfXmIqUYW6cMZB01V9MrmZ4EU2sME3H/9/6iDn:aFVVYdr5MWh4RqUYWdgB01V9zZ4wM9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NXOV3OBF_NoTrialByJ.N.dll
Files
-
NXOV3OBF_NoTrialByJ.N.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 732B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ