AccountSpider NFA Tool[.]exe | Triage

Resubmissions

12-12-2024 18:54

241212-xj8krstle1 3

12-12-2024 18:51

241212-xhfhlatkfx 3

12-12-2024 18:38

241212-w96cnasqh1 8

Sharing

General

Target

AccountSpider NFA Tool.exe
Size

3.5MB
MD5

38b60696da35d7ca38f59e0e8e9fb4ac
SHA1

52ca2a5386a4d021e31ac0fe0fc4aeff42117056
SHA256

36d6b212bce968e1473e156678cbf4f298109c5689d7f20ba29f63a96d8dc9f0
SHA512

62bdc1acf10fd851a8d3e4676760e9897ba0ea84c25a373612e87c15245bd7604bfd6f00f9c05ac027da5d9171cfd35f0f5540ccd83fa3915ab2ef11da3d4b7b
SSDEEP

49152:qddgucgciQLJ/MzV47Zb/9BPABDaccgX8owpoFkqXfd+/9At5Dt48anoL:tulch/eV4d2MgXzwYkqXf0FMG8WoL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AccountSpider NFA Tool.exe

Files

AccountSpider NFA Tool.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\lupohan\Documents\WeChat Files\wxid_dx113u5c8cuq21\FileStorage\File\2024-06\pythonProject\yes\obj\Release\AccountSpider NFA Tool.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ