NyupLauncher[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NyupLauncher.exe
Size

556KB
MD5

888b0b6d7915a6146af46833ab8b1d3f
SHA1

86395c3075b4c91224559d7a7e2a4df1b9b6ded8
SHA256

d8a413dae1ad80bddecb94ed21cc7f8c0efb37c9ba094ef935986ddc592fe0ae
SHA512

faf935bece62b9027a3f8885ec7cbaa6298291bc3f836efcd885d7a8e5844682f0121c7ad73a786151d91c3fdbf397f7dd477f0898669646ec1eb9f1cc457edc
SSDEEP

3072:HyAeMciaihiy9pyAeMciaihRzyr703yj+TK9ksZ:JsERHsEnzyr7lWK9kA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NyupLauncher.exe

Files

NyupLauncher.exe
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

F:\Документы\Rep\NyupAfterEAC\NyupLauncher\obj\Release\net8.0-windows\win-x64\NyupLauncher.pdb

Sections

.text
Size: 540KB - Virtual size: 536KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ