General

  • Target
    Nv2-PC.exe
  • Size 10.3MB
  • Sample260707-fdypyah14x
  • SHA256 ea38bc7318f7dc18ee61cbdb73eba73bb7969c31ebbfccb0dfe3bda5f6d3a270
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • Nv2-PC.exe
    .exe 10.3MB

Nv2-PC.exe

  • IMPHASH 9d935320e17a06db6b40261fb63f7841
  • SHA256 ea38bc7318f7dc18ee61cbdb73eba73bb7969c31ebbfccb0dfe3bda5f6d3a270
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
0e:98:3e:25:e2:f2:50:08:59:b8:70:d8:5f:c8:51:73:a1:5b:b4:ea
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=Information Systems+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Minor OS version
0
Major OS version
5
Entry point
6083132
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
FlashPlayer.pdb