General

  • Target
    nox_setup_v7.0.0.8_full.exe
  • Size 431.6MB
  • Sample260706-tx8adadv3p
  • SHA256 f934cfb725d75cf7511d723c265b3b08dc6e1ee8ecd24c077ba20faacbb8099d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • nox_setup_v7.0.0.8_full.exe
    .exe 431.6MB

nox_setup_v7.0.0.8_full.exe

  • IMPHASH 2554b81d657693edf4a27d8d67ee1852
  • SHA256 f934cfb725d75cf7511d723c265b3b08dc6e1ee8ecd24c077ba20faacbb8099d
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
3f:f3:b2:41:47:e8:4a:74:c8:4c:e2:07:62:7a:b4:05:43:e4:c1:12
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Nox Limited,O=Nox Limited,ST=Beijing,C=CN
Minor OS version
0
Major OS version
5
Entry point
637505
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
d:\packingworkspace\1611115232129\appsInstall\apps\bin\OutPut\Nox\NoxPack.pdb