Nigger[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Nigger.exe
Size

1.8MB
MD5

8908aca4677aeafaf8fa7543ad2c8265
SHA1

1ab5f6dfd09530560286c132868d5dead1e478d2
SHA256

c402b4e1ab9f6f581f488b16d2d84913b16178567e2025055dbd4a4e3acff4d8
SHA512

8f5b76b3effaeae81910bf00e2d9cbaa6f899028a0481545c44321e01c6fec3e879358d5a3bd953ae2d6d682ab15a1d9faaf5e40da8b802a59e4c1ccd219d5c2
SSDEEP

49152:nAjiSiHkqXfd+/9ATrgBWBKH8jkDVFCNXODzWS9HfX0H:AjiSiHkqXf0F9+KH4kpc+DX/0H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Nigger.exe

Files

Nigger.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Trapped Bypass Done\Trapped Bypass\obj\x64\Release\Nigger.pdb

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ