NXO V5[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NXO V5.dll
Size

1.5MB
MD5

7fc45fa294eaa30518893fe9a0534a2d
SHA1

e816c381e788e18a31ce21ee7b6a890527558de1
SHA256

24e1720fa0e6bf72dbc14bb457b033346eff158c4c9fe42d0d677a3254a9504c
SHA512

0273fd957642bc360bed1dc664cc5e431fdd8200f7f9f01757de978cf452a2d3d88dd0e05ba8d5999a49429f018a8760daad3df79c473e3390afa651440e3c7b
SSDEEP

49152:I/cXp5FTs84y2nkXaDWjrpVa2Vb/sdtHozv4daz2b80Eg4W9g7GaYE5XBmfHnp/:/Xa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NXO V5.dll

Files

NXO V5.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ