NL Hybrid[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NL Hybrid.dll
Size

4.2MB
MD5

52f58ead674cf786d9a7cf9a764775c8
SHA1

a2671dbcf84183505675fe9424e61a94b9dfcb30
SHA256

e4505dd3c40ff040d2bd42b42719118d4a267455d3295daaf7feeb5acce922c7
SHA512

faa065f0b985d11f8c8e587dbed9640e6ddb553252a447cd28b96cf5225f338c9800181b011e05151895a015076b83a7747b257e053c1a26743222ce78971489
SSDEEP

98304:ZKZ5ERLz/w54Hlav91Z0ddr8wNU1KVbzAyi0yqb:Zu5EN5HlOyapMNk0y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NL Hybrid.dll

Files

NL Hybrid.dll
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

NL Hybrid.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.2MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ