NL Hybrid.pdb
Static task
static1
General
-
Target
NL Hybrid.dll
-
Size
4.2MB
-
MD5
59d2b276fc97ad11526dde6b26b96a6f
-
SHA1
16981b2f8740db50bd6a5264c953a1819ebabcbb
-
SHA256
d7172094a0debf25d9c0234e364d80669aeae71871ab608d48420bc34e978fa9
-
SHA512
32fd83b2c25b12764d765870a9922505bc3381090a4a24d110e4e0606ff600171165e282aafcaee3933af3e3e044e0364ef515726db498cb32f65d579ea84cb9
-
SSDEEP
49152:rcHd5Hx+4ZQkSTJGZaKg7rG72oYyBk6MSYrdZQhG10LfHJceodg7SeJKCLkd7FPn:0HH5fiugf02oYyBk6zv+eGYS+Lkdpxl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NL Hybrid.dll
Files
-
NL Hybrid.dll.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 4.2MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ