NomNom-win-x64-stable-Setup[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NomNom-win-x64-stable-Setup.exe
Size

184.0MB
MD5

b744a6a67c939a9c9fdb67e70f23bbc3
SHA1

fb1415c9b508fbcc0d9dcdd311ecab55b6e16ffb
SHA256

9265376b852b1236da064e5bb6b060895101226bdfbd736854f8b86c393751ed
SHA512

9592761b2af39ad1202e5a39a89ebb87fca13df629063edbf6212b010fb4295c589236fd47c051b8a66c6d4ac70d326b2f157d9c18db6ee3db1e0c35cac49aa2
SSDEEP

3145728:D7XIVkiuLeyyH70lf+JBhjMZ4MLlfsRS6N3LlmxFAdE2Dp68ZXYzMCOr4zGZ3hRP:DrKkiurk70lf+JBhj+LRfiSCsxFcE2gg

Score

1^/10

Malware Config

Signatures

Files

NomNom-win-x64-stable-Setup.exe
.exe windows:6 windows x86 arch:x86

3d3bed72148696a7957064bb690715bd

Code Sign

52:0c:24:a2:d4:a8:70:a2:47:c1:25:6c:b4:ec:46:4e
Certificate

Issuer

CN=Christian Engelhardt,C=DE,1.2.840.113549.1.9.1=#0c1c63656e67656c68612e6170706465766c406f75746c6f6f6b2e636f6d

Not Before

18/08/2024, 13:26

Not After

18/08/2025, 13:46

Subject

CN=Christian Engelhardt,C=DE,1.2.840.113549.1.9.1=#0c1c63656e67656c68612e6170706465766c406f75746c6f6f6b2e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a3:47:8c:52:e1:1c:f3:c6:0a:a2:21:c3:25:80:39:b9:51:3a:c3:06:ad:cc:58:56:6c:7a:7e:31:81:7a:9f:99
Signer

Actual PE Digest

a3:47:8c:52:e1:1c:f3:c6:0a:a2:21:c3:25:80:39:b9:51:3a:c3:06:ad:cc:58:56:6c:7a:7e:31:81:7a:9f:99

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\a\velopack\velopack\target\i686-pc-windows-msvc\release\deps\setup.pdb

Imports

kernel32

AddVectoredExceptionHandler
SetThreadStackGuarantee
GetLastError
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
SetDefaultDllDirectories
GetCommandLineW
SetCurrentDirectoryW
HeapAlloc
GetProcessHeap
HeapFree
HeapReAlloc
GetConsoleMode
SetConsoleMode
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
GetTimeZoneInformationForYear
CloseHandle
GetFileInformationByHandleEx
SetFileInformationByHandle
CreateFileMappingW
UnmapViewOfFile
GetSystemInfo
GetFullPathNameW
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsSetValue
GetCurrentProcess
DuplicateHandle
GetFileInformationByHandle
GetCurrentThread
InitOnceBeginInitialize
TlsAlloc
InitOnceComplete
TlsFree
TryAcquireSRWLockExclusive
GetStdHandle
WaitForSingleObject
MultiByteToWideChar
WriteConsoleW
SetLastError
CreateWaitableTimerExW
SetWaitableTimer
Sleep
QueryPerformanceCounter
QueryPerformanceFrequency
GetModuleHandleW
FormatMessageW
GetCurrentDirectoryW
ReleaseMutex
WaitForSingleObjectEx
LoadLibraryA
GetCurrentProcessId
CreateMutexA
RtlCaptureContext
GetEnvironmentVariableW
GetModuleFileNameW
CreateFileW
SetFilePointerEx
FindNextFileW
CreateDirectoryW
FindFirstFileW
FindClose
SetHandleInformation
GetEnvironmentStringsW
FreeEnvironmentStringsW
CompareStringOrdinal
GetSystemDirectoryW
GetWindowsDirectoryW
CreateProcessW
GetFileAttributesW
InitializeProcThreadAttributeList
UpdateProcThreadAttribute
DeleteProcThreadAttributeList
CreateNamedPipeW
CreateThread
ReadFileEx
SleepEx
WriteFileEx
ExitProcess
GetExitCodeProcess
GetSystemTimeAsFileTime
AcquireSRWLockShared
ReleaseSRWLockShared
DeleteFileW
MoveFileExW
SwitchToThread
CreateSymbolicLinkW
GetFileType
SystemTimeToFileTime
GetLongPathNameW
ExpandEnvironmentStringsW
MulDiv
OpenProcess
QueryFullProcessImageNameW
TerminateProcess
VerSetConditionMask
VerifyVersionInfoW
SetThreadErrorMode
LoadLibraryExW
FreeLibrary
IsWow64Process
lstrlenW
GetNativeSystemInfo
MapViewOfFile
VirtualProtect
GetDiskFreeSpaceExW
GetProcessId
CopyFileExW
CreateMutexW
SystemTimeToTzSpecificLocalTime
LoadLibraryExA
GlobalFree
GlobalAlloc
LocalFree
OutputDebugStringA
OutputDebugStringW
GetConsoleOutputCP
FlushFileBuffers
HeapSize
LCMapStringW
CompareStringW
GetStringTypeW
SetStdHandle
SetEnvironmentVariableW
WideCharToMultiByte
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
DecodePointer
GetCommandLineA
GetModuleHandleExW
WriteFile
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
EncodePointer
RtlUnwind
VirtualQuery
RaiseException
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetCurrentThreadId
SleepConditionVariableSRW
WakeAllConditionVariable

ntdll

NtWriteFile
NtReadFile
RtlNtStatusToDosError
NtCreateFile
RtlInitUnicodeString

user32

DispatchMessageW
TranslateMessage
IsDialogMessageW
TranslateAcceleratorW
DeferWindowPos
ScreenToClient
GetParent
GetWindowRect
BeginDeferWindowPos
PostQuitMessage
EnumChildWindows
GetWindowLongW
ReleaseDC
ShowWindow
SetFocus
GetFocus
GetDC
GetClientRect
DefWindowProcW
LoadIconW
LoadCursorW
GetAncestor
LoadImageW
DestroyAcceleratorTable
SetWindowLongW
AllowSetForegroundWindow
UpdateWindow
CreateWindowExW
AdjustWindowRectEx
GetSystemMetrics
GetClassInfoExW
LoadAcceleratorsW
CreateDialogParamW
RegisterClassExW
SystemParametersInfoW
SetUserObjectInformationW
SetProcessDPIAware
EndDialog
InvalidateRect
SendMessageW
SetTimer
EndPaint
FillRect
GetDesktopWindow
BeginPaint
GetMessageW
IsChild
GetWindow
DestroyCursor
DestroyIcon
EndDeferWindowPos

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 794KB - Virtual size: 794KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3d3bed72148696a7957064bb690715bd

Code Sign

52:0c:24:a2:d4:a8:70:a2:47:c1:25:6c:b4:ec:46:4eCertificate

Extended Key Usages

Key Usages

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89Certificate

Extended Key Usages

Key Usages

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3fCertificate

Extended Key Usages

Key Usages

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68Certificate

Extended Key Usages

Key Usages

a3:47:8c:52:e1:1c:f3:c6:0a:a2:21:c3:25:80:39:b9:51:3a:c3:06:ad:cc:58:56:6c:7a:7e:31:81:7a:9f:99Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

ntdll

user32

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 794KB - Virtual size: 794KB

.data Size: 3KB - Virtual size: 6KB

.rsrc Size: 60KB - Virtual size: 60KB

.reloc Size: 66KB - Virtual size: 66KB

52:0c:24:a2:d4:a8:70:a2:47:c1:25:6c:b4:ec:46:4e
Certificate

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

a3:47:8c:52:e1:1c:f3:c6:0a:a2:21:c3:25:80:39:b9:51:3a:c3:06:ad:cc:58:56:6c:7a:7e:31:81:7a:9f:99
Signer

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 794KB - Virtual size: 794KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 60KB - Virtual size: 60KB

.reloc
Size: 66KB - Virtual size: 66KB