General

  • Target

    NVM.rar

  • Size

    46.8MB

  • MD5

    fb64fc4365c3dfcea86ec690cc50ad06

  • SHA1

    79a91b88f0a31e129e6de2139a7656a80158f6a2

  • SHA256

    1ba063857f2ac09486dadde1d4cd38899a24c52d3b246b817b2add01b15c2a7b

  • SHA512

    7777ccbfdc6cab7853089baed04ab4fdea16c3b1e987231d0463cbdb0712c553a196f4458e5d521a16bea53c935a24b65499b4f5c6fdd65b76e845241bf950dd

  • SSDEEP

    786432:7pCFNonOS22UHreLOg57ynfuBEl0ss+JGTpSfgv8yoSWB9+2O8QDxwxV3l24Eos3:7pUSnMfe57yf4n+Jgso0yTO+2O5x0V2t

Score
5/10

Malware Config

Signatures

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • NVM.rar
    .rar
  • NVM/Loader.exe
    .exe windows:5 windows x64 arch:x64

    8e94250c88a6c0e478828f96bcbb1662


    Headers

    Imports

    Sections

  • NVM/SafeGuard-Library.dll
    .dll windows:6 windows x64 arch:x64

    5c84a79d2079cbdb9230c9e2df603a56


    Headers

    Imports

    Exports

    Sections

  • NVM/VMProtectSDK64.dll
    .dll windows:5 windows x64 arch:x64

    1851ff453adce0cef5274e320d5bed3c


    Headers

    Imports

    Exports

    Sections

  • NVM/brotlicommon.dll
    .dll .js windows:6 windows x64 arch:x64 polyglot

    e6e730bb482f9ddbda6ea9dc3a88218e


    Headers

    Imports

    Exports

    Sections

  • NVM/brotlidec.dll
    .dll windows:6 windows x64 arch:x64

    7180aa9b7b3df8e6f5475407f4d0648b


    Headers

    Imports

    Exports

    Sections

  • NVM/bz2.dll
    .dll windows:6 windows x64 arch:x64

    522aa2529ecd909940b12e549ea51685


    Headers

    Imports

    Exports

    Sections

  • NVM/freetype.dll
    .dll windows:6 windows x64 arch:x64

    391543b826dcc8509d702770be4cad87


    Headers

    Imports

    Exports

    Sections

  • NVM/imgui.ini
  • NVM/libpng16.dll
    .dll windows:6 windows x64 arch:x64

    7d84ceaeda2d94c870a26f7b86c1c8a4


    Headers

    Imports

    Exports

    Sections

  • NVM/zlib1.dll
    .dll windows:6 windows x64 arch:x64

    d879d2294039900ef484e0f01607f882


    Headers

    Imports

    Exports

    Sections