NwInstV2[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NwInstV2.exe
Size

605KB
MD5

2f768261432795123cf7b7ba9f7997e2
SHA1

d1d1f1845c1b7ea92b903acfaa78c3e3c15ead83
SHA256

7f5c926e86457f453baa9debe728bccf21b7bef6b4bcdcbfff2230348ac019bb
SHA512

dce1efef7b6b9961a0e0b551b386ee54a01f8517564c5fff1915585667713d10463ed9ac42790bc42dd550d23abb25e902a73a9cfe5ce8f0440d25d0c11879b9
SSDEEP

12288:4SiR8MBW20Kn0ecTLuCctsf/lRHhNEn7RW4liWyltbDm6X+uGA/EJ5KXvkmvE3nZ:46XNKNcQY/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NwInstV2.exe

Files

NwInstV2.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 602KB - Virtual size: 601KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ