General

  • Target

    nvkFixer.zip

  • Size

    975KB

  • MD5

    8f4680e626e17db12debe805bf1685a2

  • SHA1

    410adfcf925cba933cf306c329d9d6458160634d

  • SHA256

    cfbfb13967573bab19261e6d2653c6fa06cb1c9008c61aa89da19cd3a1c5c4ca

  • SHA512

    12b0797c4f768d21571f930628b62451f9a544eac12a799482f369c066a0d03e3efae40ba53746828326e89b9e11becc59dd92ccf8644339370b7ed792bb0dad

  • SSDEEP

    24576:p+Mddk2gTc4GRcE51hYYt+8qf92GLgdmRV4+IkpC:p+mQc4oD51dv29FCGVTC

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • nvkFixer.zip
    .zip
  • nvkFix/Control Defender/Defender_Settings.vbs
    .vbs
  • nvkFix/Control Defender/dControl.exe
    .exe windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • nvkFix/FIX.bat
  • nvkFix/WUB/Wub_x64.exe
    .exe windows:5 windows x64 arch:x64

    42b8d4fa3bc2c4336a20de1bdf1422d8


    Code Sign

    Headers

    Imports

    Sections