Nohboard[.]7z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Nohboard.7z
Size

773KB
MD5

6d733854d7eb5ac279da52c1425e6d4a
SHA1

005fc18213104bb1577275719600e582d56fce4b
SHA256

9768d1f25baeb8ce56197e70b54047460877071f7ea11630062e30601ef663c1
SHA512

0122307c85dd50555124d8a954e38af3bc7f17a19649d6ad10ebc8f6e3283c2e35984b7aba422741f3710b11e2c8e3877f4e7114d739a8d8c81765c6930c2e88
SSDEEP

12288:nwy2+dPUnDCOSStRbaiFpVrrzQkAdPqdOovw9gGPSEmTXTPtCqvcKetlsaB3EK2z:r2+RUnNfbaOVTHJLw9gmS1rEN9m7ibY

Score

3^/10

Malware Config

Signatures

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Nohboard/NohBoard.Hooking.dll
unpack001/Nohboard/NohBoard.exe
unpack001/Nohboard/clipper_library.dll

Files

Nohboard.7z
.7z
Nohboard/NohBoard.Hooking.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\nohboard\Hooking\obj\Release\NohBoard.Hooking.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Nohboard/NohBoard.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\projects\nohboard\NohBoard\obj\Release\NohBoard.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 506KB - Virtual size: 505KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 327KB - Virtual size: 327KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Nohboard/NohBoard.json
Nohboard/System.ValueTuple.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:c2:a0:09:c5:37:76:e9:f6:cd:00:00:00:00:00:c2
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:C3B0-0F6A-4111,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:20

Not After

11/08/2018, 20:20

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

50:0b:9b:f8:2d:1f:dc:2c:85:5f:8d:44:8e:f0:06:34:42:5d:c4:9a:fc:6f:51:5e:c7:96:0d:06:3c:1b:20:16
Signer

Actual PE Digest

50:0b:9b:f8:2d:1f:dc:2c:85:5f:8d:44:8e:f0:06:34:42:5d:c4:9a:fc:6f:51:5e:c7:96:0d:06:3c:1b:20:16

Digest Algorithm

sha256

PE Digest Matches

true

e0:5a:d1:da:4b:60:60:fb:28:f2:b5:1c:59:6c:d7:66:96:16:eb:e0
Signer

Actual PE Digest

e0:5a:d1:da:4b:60:60:fb:28:f2:b5:1c:59:6c:d7:66:96:16:eb:e0

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\A\_work\39\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.ValueTuple\netstandard1.0\System.ValueTuple.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Nohboard/clipper_library.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\nohboard\clipper_library\obj\Release\clipper_library.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Nohboard/keyboards/BurningFish/steelseries6gv2/keyboard.json
Nohboard/keyboards/BurningFish/steelseries6gv2mouse/keyboard.json
Nohboard/keyboards/BurningFish/steelseries6gv2mousemove/keyboard.json
Nohboard/keyboards/BurningFish/us_intlmouse/keyboard.json
Nohboard/keyboards/BurningFish/us_intlmousemove/keyboard.json
Nohboard/keyboards/GamesLegacy/arrows/keyboard.json
Nohboard/keyboards/GamesLegacy/arrows_numpad/keyboard.json
Nohboard/keyboards/GamesLegacy/azerty_fps/keyboard.json
Nohboard/keyboards/GamesLegacy/azerty_sc2/keyboard.json
Nohboard/keyboards/GamesLegacy/bfdibranches/keyboard.json
Nohboard/keyboards/GamesLegacy/game_dota/keyboard.json
Nohboard/keyboards/GamesLegacy/game_esa/keyboard.json
Nohboard/keyboards/GamesLegacy/game_fps1/keyboard.json
Nohboard/keyboards/GamesLegacy/game_fps1_mm/keyboard.json
Nohboard/keyboards/GamesLegacy/game_fps2/keyboard.json
Nohboard/keyboards/GamesLegacy/game_isaac/keyboard.json
Nohboard/keyboards/GamesLegacy/game_keys1/keyboard.json
Nohboard/keyboards/GamesLegacy/game_worms/keyboard.json
Nohboard/keyboards/GamesLegacy/numpad/keyboard.json
Nohboard/keyboards/GamesLegacy/us_intl_fpsgame/keyboard.json
Nohboard/keyboards/GamesLegacy/us_intl_fpsgame2/keyboard.json
Nohboard/keyboards/GamesLegacy/us_intl_jc2/keyboard.json
Nohboard/keyboards/GamesLegacy/us_intl_sc2/keyboard.json
Nohboard/keyboards/GamesLegacy/us_intl_surfandbhop/keyboard.json
Nohboard/keyboards/GamesLegacy/wsadmouse/keyboard.json
Nohboard/keyboards/HaleyHalcyon/1button/keyboard.json
Nohboard/keyboards/HaleyHalcyon/2button-puzzle/keyboard.json
Nohboard/keyboards/HaleyHalcyon/2button/keyboard.json
Nohboard/keyboards/HaleyHalcyon/rhythm4/keyboard.json
Nohboard/keyboards/HaleyHalcyon/rhythm5/keyboard.json
Nohboard/keyboards/HaleyHalcyon/rhythm6/keyboard.json
Nohboard/keyboards/HaleyHalcyon/rhythm7/keyboard.json
Nohboard/keyboards/Normal/azerty/keyboard.json
Nohboard/keyboards/Normal/azerty_basic/keyboard.json
Nohboard/keyboards/Normal/azerty_nonum/keyboard.json
Nohboard/keyboards/Normal/colemak/keyboard.json
Nohboard/keyboards/Normal/de/keyboard.json
Nohboard/keyboards/Normal/de_basic/keyboard.json
Nohboard/keyboards/Normal/de_en_nonum/keyboard.json
Nohboard/keyboards/Normal/de_nonum/keyboard.json
Nohboard/keyboards/Normal/dvorak/keyboard.json
Nohboard/keyboards/Normal/mouseAll/keyboard.json
Nohboard/keyboards/Normal/mouseMovement/keyboard.json
Nohboard/keyboards/Normal/scandi/keyboard.json
Nohboard/keyboards/Normal/scandi_basic/keyboard.json
Nohboard/keyboards/Normal/scandi_nonum/keyboard.json
Nohboard/keyboards/Normal/uk/keyboard.json
Nohboard/keyboards/Normal/us_intl/keyboard.json
Nohboard/keyboards/Normal/us_intl_basic/keyboard.json
Nohboard/keyboards/Normal/us_intl_basicmouse/keyboard.json
Nohboard/keyboards/Normal/us_intl_basicmousemove/keyboard.json
Nohboard/keyboards/Normal/us_intl_nonum/keyboard.json
Nohboard/keyboards/Normal/us_intl_statekeys/keyboard.json
Nohboard/keyboards/Normal/workman/keyboard.json
Nohboard/keyboards/TheCore/TheCore/TheCore.style
Nohboard/keyboards/TheCore/TheCore/keyboard.json
Nohboard/keyboards/TheCore/images/leftb.png
.png
Nohboard/keyboards/TheCore/images/leftbp.png
.png
Nohboard/keyboards/TheCore/images/m4b.png
.png
Nohboard/keyboards/TheCore/images/m4w.png
.png
Nohboard/keyboards/TheCore/images/m5b.png
.png
Nohboard/keyboards/TheCore/images/m5w.png
.png
Nohboard/keyboards/TheCore/images/rightb.png
.png
Nohboard/keyboards/TheCore/images/rightbp.png
.png
Nohboard/keyboards/TheCore/images/sb.png
.png
Nohboard/keyboards/TheCore/images/sdb.png
.png
Nohboard/keyboards/TheCore/images/sdw.png
.png
Nohboard/keyboards/TheCore/images/sub.png
.png
Nohboard/keyboards/TheCore/images/suw.png
.png
Nohboard/keyboards/TheCore/images/sw.png
.png
Nohboard/keyboards/TheCore/images/t.png
.png
Nohboard/keyboards/global/default.style
Nohboard/keyboards/joao7yt/fps/clean-black_clean-white.style
Nohboard/keyboards/joao7yt/fps/keyboard.json
Nohboard/keyboards/joao7yt/fps/normal-black_normal-white.style
Nohboard/keyboards/joao7yt/fps/normal-white_normal-black.style
Nohboard/keyboards/joao7yt/fps/outline-black_normal-black.style
Nohboard/keyboards/joao7yt/fps/outline-black_normal-white.style
Nohboard/keyboards/joao7yt/fps/outline-black_outline-white.style
Nohboard/keyboards/joao7yt/fps/outline-white_normal-black.style
Nohboard/keyboards/joao7yt/fps/outline-white_normal-white.style
Nohboard/keyboards/joao7yt/fps/outline-white_outline-black.style
Nohboard/keyboards/joao7yt/fps/outlined-black_normal-white.style
Nohboard/keyboards/joao7yt/fps/outlined-black_outlined-white.style
Nohboard/keyboards/joao7yt/fps/outlined-white_normal-black.style
Nohboard/keyboards/joao7yt/fps/outlined-white_outlined-black.style
Nohboard/keyboards/joao7yt/images/capsb.png
.png
Nohboard/keyboards/joao7yt/images/capsib.png
.png
Nohboard/keyboards/joao7yt/images/capsiw.png
.png
Nohboard/keyboards/joao7yt/images/capsob.png
.png
Nohboard/keyboards/joao7yt/images/capsow.png
.png
Nohboard/keyboards/joao7yt/images/capsw.png
.png
Nohboard/keyboards/joao7yt/images/ctrlob.png
.png
Nohboard/keyboards/joao7yt/images/ctrlow.png
.png
Nohboard/keyboards/joao7yt/images/keyb.png
.png
Nohboard/keyboards/joao7yt/images/keyib.png
.png
Nohboard/keyboards/joao7yt/images/keyiw.png
.png
Nohboard/keyboards/joao7yt/images/keyob.png
.png
Nohboard/keyboards/joao7yt/images/keyow.png
.png
Nohboard/keyboards/joao7yt/images/keyw.png
.png
Nohboard/keyboards/joao7yt/images/leftb.png
.png
Nohboard/keyboards/joao7yt/images/leftbp.png
.png
Nohboard/keyboards/joao7yt/images/leftib.png
.png
Nohboard/keyboards/joao7yt/images/leftibp.png
.png
Nohboard/keyboards/joao7yt/images/leftiw.png
.png
Nohboard/keyboards/joao7yt/images/leftiwp.png
.png
Nohboard/keyboards/joao7yt/images/leftob.png
.png
Nohboard/keyboards/joao7yt/images/leftobn.png
.png
Nohboard/keyboards/joao7yt/images/leftobp.png
.png
Nohboard/keyboards/joao7yt/images/leftow.png
.png
Nohboard/keyboards/joao7yt/images/leftown.png
.png
Nohboard/keyboards/joao7yt/images/leftowp.png
.png
Nohboard/keyboards/joao7yt/images/leftw.png
.png
Nohboard/keyboards/joao7yt/images/leftwp.png
.png
Nohboard/keyboards/joao7yt/images/m4b.png
.png
Nohboard/keyboards/joao7yt/images/m4w.png
.png
Nohboard/keyboards/joao7yt/images/m5b.png
.png
Nohboard/keyboards/joao7yt/images/m5w.png
.png
Nohboard/keyboards/joao7yt/images/rightb.png
.png
Nohboard/keyboards/joao7yt/images/rightbp.png
.png
Nohboard/keyboards/joao7yt/images/rightib.png
.png
Nohboard/keyboards/joao7yt/images/rightibp.png
.png
Nohboard/keyboards/joao7yt/images/rightiw.png
.png
Nohboard/keyboards/joao7yt/images/rightiwp.png
.png
Nohboard/keyboards/joao7yt/images/rightob.png
.png
Nohboard/keyboards/joao7yt/images/rightobn.png
.png
Nohboard/keyboards/joao7yt/images/rightobp.png
.png
Nohboard/keyboards/joao7yt/images/rightow.png
.png
Nohboard/keyboards/joao7yt/images/rightown.png
.png
Nohboard/keyboards/joao7yt/images/rightowp.png
.png
Nohboard/keyboards/joao7yt/images/rightw.png
.png
Nohboard/keyboards/joao7yt/images/rightwp.png
.png
Nohboard/keyboards/joao7yt/images/sb.png
.png
Nohboard/keyboards/joao7yt/images/sdb.png
.png
Nohboard/keyboards/joao7yt/images/sdw.png
.png
Nohboard/keyboards/joao7yt/images/shiftb.png
.png
Nohboard/keyboards/joao7yt/images/shiftib.png
.png
Nohboard/keyboards/joao7yt/images/shiftiw.png
.png
Nohboard/keyboards/joao7yt/images/shiftob.png
.png
Nohboard/keyboards/joao7yt/images/shiftow.png
.png
Nohboard/keyboards/joao7yt/images/shiftw.png
.png
Nohboard/keyboards/joao7yt/images/spaceb.png
.png
Nohboard/keyboards/joao7yt/images/spaceib.png
.png
Nohboard/keyboards/joao7yt/images/spaceiw.png
.png
Nohboard/keyboards/joao7yt/images/spaceob.png
.png
Nohboard/keyboards/joao7yt/images/spaceow.png
.png
Nohboard/keyboards/joao7yt/images/spacew.png
.png
Nohboard/keyboards/joao7yt/images/sub.png
.png
Nohboard/keyboards/joao7yt/images/suw.png
.png
Nohboard/keyboards/joao7yt/images/sw.png
.png
Nohboard/keyboards/joao7yt/images/t.png
.png
Nohboard/keyboards/joao7yt/images/tabb.png
.png
Nohboard/keyboards/joao7yt/images/tabib.png
.png
Nohboard/keyboards/joao7yt/images/tabiw.png
.png
Nohboard/keyboards/joao7yt/images/tabob.png
.png
Nohboard/keyboards/joao7yt/images/tabow.png
.png
Nohboard/keyboards/joao7yt/images/tabw.png
.png
Nohboard/keyboards/quake/images/mouse-hr.png
.png
Nohboard/keyboards/quake/images/mouse.png
.png
Nohboard/keyboards/quake/images/mouseleftclick-hr.png
.png
Nohboard/keyboards/quake/images/mouseleftclick.png
.png
Nohboard/keyboards/quake/images/mousemiddleclick-hr.png
.png
Nohboard/keyboards/quake/images/mousemiddleclick.png
.png
Nohboard/keyboards/quake/images/mouserightclick-hr.png
.png
Nohboard/keyboards/quake/images/mouserightclick.png
.png
Nohboard/keyboards/quake/images/mwheeldown-hr.png
.png
Nohboard/keyboards/quake/images/mwheeldown.png
.png
Nohboard/keyboards/quake/images/mwheelup-hr.png
.png
Nohboard/keyboards/quake/images/mwheelup.png
.png
Nohboard/keyboards/quake/images/pressed-hr.png
.png
Nohboard/keyboards/quake/images/pressed.png
.png
Nohboard/keyboards/quake/images/shiftctrlpressed-hr.png
.png
Nohboard/keyboards/quake/images/shiftctrlpressed.png
.png
Nohboard/keyboards/quake/images/shiftctrlunpressed-hr.png
.png
Nohboard/keyboards/quake/images/shiftctrlunpressed.png
.png
Nohboard/keyboards/quake/images/space-hr.png
.png
Nohboard/keyboards/quake/images/space.png
.png
Nohboard/keyboards/quake/images/spacepressed-hr.png
.png
Nohboard/keyboards/quake/images/spacepressed.png
.png
Nohboard/keyboards/quake/images/t-hr.png
.png
Nohboard/keyboards/quake/images/t.png
.png
Nohboard/keyboards/quake/images/unpressed-hr.png
.png
Nohboard/keyboards/quake/images/unpressed.png
.png
Nohboard/keyboards/quake/quake/keyboard.json
Nohboard/keyboards/quake/quake/quake-champions.style
Nohboard/keyboards/quake/quakehighres/keyboard.json
Nohboard/keyboards/quake/quakehighres/quake-champions-highres.style
Nohboard/keyboards/wheels/alienware 17/clean-black_clean-white.style
Nohboard/keyboards/wheels/alienware 17/clean-white_clean-black.style
Nohboard/keyboards/wheels/alienware 17/keyboard.json
Nohboard/keyboards/wheels/alienware 17/normal-black_normal-white.style
Nohboard/keyboards/wheels/alienware 17/normal-white_normal-black.style
Nohboard/keyboards/wheels/images/altb.png
.png
Nohboard/keyboards/wheels/images/altw.png
.png
Nohboard/keyboards/wheels/images/capsb.png
.png
Nohboard/keyboards/wheels/images/capsw.png
.png
Nohboard/keyboards/wheels/images/enterb.png
.png
Nohboard/keyboards/wheels/images/enterw.png
.png
Nohboard/keyboards/wheels/images/funcb.png
.png
Nohboard/keyboards/wheels/images/funcw.png
.png
Nohboard/keyboards/wheels/images/keyb.png
.png
Nohboard/keyboards/wheels/images/keyw.png
.png
Nohboard/keyboards/wheels/images/shiftb.png
.png
Nohboard/keyboards/wheels/images/shiftw.png
.png
Nohboard/keyboards/wheels/images/spaceb.png
.png
Nohboard/keyboards/wheels/images/spacew.png
.png
Nohboard/keyboards/wheels/images/subb.png
.png
Nohboard/keyboards/wheels/images/subw.png
.png
Nohboard/keyboards/wheels/images/tabb.png
.png
Nohboard/keyboards/wheels/images/tabw.png
.png

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 20KB - Virtual size: 19KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 506KB - Virtual size: 505KB

.rsrc Size: 327KB - Virtual size: 327KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:c2:a0:09:c5:37:76:e9:f6:cd:00:00:00:00:00:c2Certificate

Extended Key Usages

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79Certificate

Extended Key Usages

61:33:26:1a:00:00:00:00:00:31Certificate

Key Usages

61:16:68:34:00:00:00:00:00:1cCertificate

Extended Key Usages

Key Usages

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

50:0b:9b:f8:2d:1f:dc:2c:85:5f:8d:44:8e:f0:06:34:42:5d:c4:9a:fc:6f:51:5e:c7:96:0d:06:3c:1b:20:16Signer

e0:5a:d1:da:4b:60:60:fb:28:f2:b5:1c:59:6c:d7:66:96:16:eb:e0Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 59KB - Virtual size: 58KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 49KB - Virtual size: 49KB

.rsrc Size: 1024B - Virtual size: 992B

.reloc Size: 512B - Virtual size: 12B

.text
Size: 20KB - Virtual size: 19KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 506KB - Virtual size: 505KB

.rsrc
Size: 327KB - Virtual size: 327KB

.reloc
Size: 512B - Virtual size: 12B

33:00:00:00:c2:a0:09:c5:37:76:e9:f6:cd:00:00:00:00:00:c2
Certificate

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

61:33:26:1a:00:00:00:00:00:31
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

50:0b:9b:f8:2d:1f:dc:2c:85:5f:8d:44:8e:f0:06:34:42:5d:c4:9a:fc:6f:51:5e:c7:96:0d:06:3c:1b:20:16
Signer

e0:5a:d1:da:4b:60:60:fb:28:f2:b5:1c:59:6c:d7:66:96:16:eb:e0
Signer

.text
Size: 59KB - Virtual size: 58KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 49KB - Virtual size: 49KB

.rsrc
Size: 1024B - Virtual size: 992B

.reloc
Size: 512B - Virtual size: 12B