Static task
static1
Behavioral task
behavioral1
Sample
tr_nfsmostwanted19trainer.zip
Resource
win11-20240508-en
Behavioral task
behavioral2
Sample
tr_nfsmostwanted19trainer/pzn-nfst.exe
Resource
win11-20240508-en
Behavioral task
behavioral3
Sample
tr_nfsmostwanted19trainer/pzn-nfst.nfo
Resource
win11-20240611-en
General
-
Target
tr_nfsmostwanted19trainer.zip
-
Size
31KB
-
MD5
a5ff25ff805bf8f7bba8e7f62788798c
-
SHA1
322e4b87d8413c25df85e3f1d311923326dd2470
-
SHA256
450e37010e7418d81f2ace77fa93b50a442fe999ce43cecf41ee71299c0b62db
-
SHA512
61b05358779cbbd8fde4cbebd255763432c39f1fb259b6d9373bf05c42da0d74bf6590d6df993d1411d475b4b3d198a8b6f6fb45096732d18aeafd14e9b95919
-
SSDEEP
768:dNWAj6ip3HKukktGxGL9fsj/gDkZxJJo20pwNgbDwXo4:n6Q3KukktGxCN2vcKNqDwXo4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/tr_nfsmostwanted19trainer/pzn-nfst.exe
Files
-
tr_nfsmostwanted19trainer.zip.zip
Password: trainer
-
tr_nfsmostwanted19trainer/pzn-nfst.exe.exe windows:4 windows x86 arch:x86
Password: trainer
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
����t Size: - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����ta Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
tr_nfsmostwanted19trainer/pzn-nfst.nfo