General

  • Target
    NPE.exe
  • Size 16.2MB
  • Sample240608-w6335aed8v
  • SHA256 4819d87fe9d0d0485fe85a3843a3e3ecd61ebe50a115dad01ec10275272be82a
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • NPE.exe
    .exe 16.2MB

NPE.exe

  • IMPHASH 6e0dcaca7f0e80510d06b4087b95e6f7
  • SHA256 4819d87fe9d0d0485fe85a3843a3e3ecd61ebe50a115dad01ec10275272be82a
  • MD5 SHA1 SHA512 SSDEEP
Password
infected
Digest
5d:17:85:6e:8e:34:bc:b7:30:de:59:cc:d4:ea:5a:b7:45:6e:72:07:67:c5:ed:d1:57:b8:38:9c:88:67:4c:8e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=NortonLifeLock Inc.,OU=Norton Product Engineering - CM,O=NortonLifeLock Inc.,L=Tempe,ST=Arizona,C=US
Minor OS version
0
Major OS version
6
Entry point
6615492
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\jenkins\workspace\SNaPE\NortonPowerEraser\Builds\npe_release_build\SNaPE\NPE\bin\bin64.iru\NPE.pdb