C:\Users\PC\Desktop\NZT\Release\NZT.pdb
Static task
static1
Behavioral task
behavioral1
Sample
NZT.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
NZT.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
NZT.exe
Resource
win11-20240508-en
General
-
Target
NZT.exe
-
Size
353KB
-
MD5
94b3c44666bb0bc0583af4771187ffbe
-
SHA1
74dc67b654ebe5d54a72b6d1e2f9d143fa75e535
-
SHA256
907a597262f464d30041b69100e730e5e932925d810b512d5d7f5a7ea7d3d2b7
-
SHA512
4b616369bd45519930fda3162f1205d002337f3c6d55663b0e1331a43d80708496996f3af3232e5a865f8447a8687a559e9b971b1b40ee71245fd79d7980a094
-
SSDEEP
6144:D88Ygp7KOFH1HcDTdTIAT45soryLQ3ud7tI1aF0jZS83AOIQ0wLg0C:D89IKOFH18npIAcSory7rideQE0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NZT.exe
Files
-
NZT.exe.exe windows:6 windows x86 arch:x86
4f06fa957f07c625546896dc1baae227
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetDriveTypeA
GetUserDefaultUILanguage
InitializeCriticalSectionEx
GetCurrentDirectoryA
CreateFileA
GetSystemDirectoryA
CloseHandle
GetLogicalDriveStringsA
SetConsoleTitleA
SetConsoleCP
GetConsoleWindow
SetConsoleOutputCP
GetPrivateProfileStringA
ReadConsoleW
ReadFile
SetEndOfFile
HeapSize
GetConsoleMode
ReadDirectoryChangesW
GetLogicalDrives
GetConsoleOutputCP
FlushFileBuffers
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
WideCharToMultiByte
GetCurrentThreadId
WaitForSingleObjectEx
Sleep
GetExitCodeThread
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
GetLocaleInfoEx
GetStringTypeW
CompareStringEx
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
RaiseException
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
GetTimeZoneInformation
HeapReAlloc
GetFileSizeEx
SetFilePointerEx
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetProcessHeap
CreateFileW
WriteConsoleW
user32
IsWindowVisible
ShowWindow
GetAsyncKeyState
advapi32
GetUserNameA
wininet
InternetGetConnectedState
Sections
.text Size: 265KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ