C:\Users\Couia\source\repos\DownloaderMalware\obj\Release\NOSU.pdb
Static task
static1
Behavioral task
behavioral1
Sample
NOSU.exe
Resource
win7-20240903-en
General
-
Target
NOSU.exe
-
Size
84KB
-
MD5
31e8dc8a36e42cdf0c84646bc58854ab
-
SHA1
a0ea723d21785fb7526697e57534e1f62e6db668
-
SHA256
a13c35eaca57888004e933e67ed8d820e390c1987427cc8a5961937a361e214b
-
SHA512
b8137a50e2e1254b8b53f54883cea15cd47de4a21854a4079495184ecc388aed5fb19752e08735216bf616653b2a648630ab52e7d7d4fc3f2aa15fdc28dc7240
-
SSDEEP
192:CpDCU0im9Bia/rAXAisGqkMM8pUHebUmIW1hc1yYpckWAoNeDWuD9DpxU2FJFEsh:DVBsOkuCebUuc1jpszKD9DTUiJFnh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NOSU.exe
Files
-
NOSU.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ