NXO_V2_Obf[.]dll | Triage

Sharing

General

Target

NXO_V2_Obf.dll
Size

864KB
MD5

f4dbe2727602c5f97bf0d046f1a76bf0
SHA1

8494be72da5f4f9d7a5be8f544c4ef2b55e0f775
SHA256

cf6f88a939a4f597351a1246340c668d2abd15495dca38434b526c96a599208a
SHA512

7f6784ac6183f76adcc28b6629ebe4781dff6b36a19fd2fede8989094ab47e4df0ae29784714ccad608647922f322a395346b72e356ea7250d8f67328ee9444e
SSDEEP

12288:ihffDVjkU19hmfgJQEXoLt803J62N7Ibb:G71acQEXsw07Sb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NXO_V2_Obf.dll

Files

NXO_V2_Obf.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 862KB - Virtual size: 861KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ