General
-
Target
nord_icon_theme_by_niivu_dduhi0c.zip
-
Size
12.1MB
-
MD5
70c49ab14187a1697f5eb9f8143e8b30
-
SHA1
1cf3953e0216699e375dbacd9ff4d42a28c8ace8
-
SHA256
017b830653c09db75497e82dd466fe995308714171b313d369d625b56c0fd365
-
SHA512
f6c59e1796d94c00bf10968301b4953e8acd5d17c1774722ae66d444cd07ba70855d2efb8fb7c0a615d48bf16757f73e410d52b80288b8ef19948469a564ae87
-
SSDEEP
393216:F+8bW7ziflLehYbJpDP2AjBSFhGf15sqB:FDS7zifBehWvHjBSFhGd5LB
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Nord Icon Theme by niivu/Nord iPack/Nord iPack.exe.remove upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Nord Icon Theme by niivu/Nord iPack/Nord iPack.exe.remove unpack003/out.upx
Files
-
nord_icon_theme_by_niivu_dduhi0c.zip.zip
-
Nord Icon Theme by niivu/CREDITS.txt
-
Nord Icon Theme by niivu/Nord 7TSP/7tsp Nord Papirus.7z.remove.7z
-
Extra/preview.png.png
-
Pack.ini
-
Resources/imageres.dll.mun.res
-
Resources/imagesp1.dll.mun.res
-
Resources/shell32.dll.mun.res
-
Resources/zipfldr.dll.mun.res
-
Nord Icon Theme by niivu/Nord 7TSP/READ ME.txt
-
Nord Icon Theme by niivu/Nord Folders/3D objects.ico
-
Nord Icon Theme by niivu/Nord Folders/Documents.ico
-
Nord Icon Theme by niivu/Nord Folders/Download.ico
-
Nord Icon Theme by niivu/Nord Folders/Favorites.ico
-
Nord Icon Theme by niivu/Nord Folders/Games.ico
-
Nord Icon Theme by niivu/Nord Folders/Links.ico
-
Nord Icon Theme by niivu/Nord Folders/Music.ico
-
Nord Icon Theme by niivu/Nord Folders/Onedrive.ico
-
Nord Icon Theme by niivu/Nord Folders/Pictures.ico
-
Nord Icon Theme by niivu/Nord Folders/Projects.ico
-
Nord Icon Theme by niivu/Nord Folders/Searches.ico
-
Nord Icon Theme by niivu/Nord Folders/User.ico
-
Nord Icon Theme by niivu/Nord Folders/Videos.ico
-
Nord Icon Theme by niivu/Nord Folders/contacts.ico
-
Nord Icon Theme by niivu/Nord Folders/desktop.ico
-
Nord Icon Theme by niivu/Nord Folders/folder.ico
-
Nord Icon Theme by niivu/Nord Icons Theme Preview.png.png
-
Nord Icon Theme by niivu/Nord iPack/Nord iPack.exe.remove.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 400KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 57KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 284KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 350KB - Virtual size: 349KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Nord Icon Theme by niivu/Nord iPack/READ ME.txt