Nightingale-SAMPLE-DO-NOT-RUN[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
Nightingale-SAMPLE-DO-NOT-RUN.bin
Size 32.5MB
Sample260714-28hsvsfs8r
SHA256 1fde25d50e3c2a5570ba281f5fde318d74b0a5dc9b6954bcf8fb9cbc29d938b6
MD5 c334e7ca89eff234cd757d13ac72ef27
SHA1 6c937998da7a47b7ffc89d60a8ef6a88d8a4181e
SHA512 7619af5999f834bf66aa9c278e919be8f3789a69d4472e9db51a7c8a6e90f75fe999000f259b66bcd1ef410328b5987cc87028c2bf7633d6b138b71f6c669f79
SSDEEP 393216:9FDMoJSe860jjBA0Vpnqc64EDxilzlI9bH+XKBvxcX20+kQNXFD:3DMoJSe860jjBA8dqB43zeJWYu7Y7
TLSH
T196778C21BA5A996CD09AC47483478A725A7130DB0B35B9FF54D896383F6DBF42F38318
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Nightingale-SAMPLE-DO-NOT-RUN.bin

File Explorer

Nightingale-SAMPLE-DO-NOT-RUN.bin

.exe 32.5MB

Nightingale-SAMPLE-DO-NOT-RUN.bin

IMPHASH 31e515b0c835c883cf21f3f05983598c
SHA256 1fde25d50e3c2a5570ba281f5fde318d74b0a5dc9b6954bcf8fb9cbc29d938b6
MD5 c334e7ca89eff234cd757d13ac72ef27
SHA1 6c937998da7a47b7ffc89d60a8ef6a88d8a4181e
SHA512 7619af5999f834bf66aa9c278e919be8f3789a69d4472e9db51a7c8a6e90f75fe999000f259b66bcd1ef410328b5987cc87028c2bf7633d6b138b71f6c669f79
SSDEEP 393216:9FDMoJSe860jjBA0Vpnqc64EDxilzlI9bH+XKBvxcX20+kQNXFD:3DMoJSe860jjBA8dqB43zeJWYu7Y7
TLSH
T196778C21BA5A996CD09AC47483478A725A7130DB0B35B9FF54D896383F6DBF42F38318
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

14547416

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Nightingale.pdb

bcryptprimitives

ProcessPrng

kernel32

LoadLibraryW LoadLibraryA SetEvent lstrlenW FreeLibrary LoadLibraryExW HeapFree GetProcessHeap GetModuleFileNameW GetNativeSystemInfo GetFileInformationByHandle AreFileApisANSI OutputDebugStringW GetDiskFreeSpaceW LockFile SetFilePointer GetFullPathNameA GetCurrentThread SetEndOfFile UnlockFileEx GetTempPathW LoadLibraryExA CreateMutexW HeapAlloc WaitForSingleObject MultiByteToWideChar GetTempPathA GetDiskFreeSpaceA GetFileAttributesA GetFileAttributesExW FormatMessageW CreateFileA SetStdHandle MoveFileExW GetComputerNameExW CreateFileW SetNamedPipeHandleState GetSystemInfo GetUserPreferredUILanguages LCIDToLocaleName GetUserDefaultUILanguage OutputDebugStringA WaitForMultipleObjectsEx GetModuleHandleW SetThreadPriority GetFullPathNameW SetHandleInformation GetConsoleMode WaitForSingleObjectEx DeleteFileA DeleteFileW UnlockFile CloseHandle TlsFree TlsSetValue TlsGetValue TlsAlloc EncodePointer RtlPcToFileHeader IsDebuggerPresent IsProcessorFeaturePresent SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive GetModuleHandleA GetProcAddress GetLastError Sleep LocalFree LockFileEx GetFileSize GetOverlappedResult PostQueuedCompletionStatus ReadFile WriteFile CancelIoEx CreateIoCompletionPort GetQueuedCompletionStatusEx GetCurrentProcessId CreateEventA GetCurrentThreadId WideCharToMultiByte SetFileCompletionNotificationModes GetFileAttributesW GetSystemTimeAsFileTime GetSystemTime FlushFileBuffers GetTickCount InitializeCriticalSectionAndSpinCount RtlUnwindEx GetEnvironmentVariableW InitializeSListHead RtlVirtualUnwind SetUnhandledExceptionFilter UnhandledExceptionFilter QueryPerformanceCounter MapViewOfFile CreateFileMappingW FormatMessageA SystemTimeToFileTime HeapDestroy HeapCompact HeapReAlloc FlushViewOfFile HeapSize HeapValidate UnmapViewOfFile HeapCreate RaiseException InitializeCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection CompareStringOrdinal FreeEnvironmentStringsW WriteFileEx SleepEx SetLastError SetFileInformationByHandle SetFileTime QueryPerformanceFrequency CreateThread CreateEventW ReadFileEx GetCurrentProcess DuplicateHandle RtlCaptureContext RtlLookupFunctionEntry GetSystemTimePreciseAsFileTime CancelIo GetFileInformationByHandleEx GetEnvironmentStringsW GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetExitCodeProcess GetProcessId TerminateProcess GetStdHandle CreateDirectoryW SetFilePointerEx AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentDirectoryW GetCommandLineW CopyFileExW FindFirstFileExW FindClose ExitProcess SwitchToThread CreateMutexA ReleaseMutex GetFinalPathNameByHandleW CreateSymbolicLinkW DeviceIoControl SetEnvironmentVariableW WriteConsoleW GetConsoleOutputCP CreateWaitableTimerExW SetWaitableTimer WaitForMultipleObjects FindNextFileW

advapi32

EventRegister RegQueryValueExW RegOpenKeyExW RegCloseKey EventSetInformation EventWriteTransfer EventUnregister SystemFunction036 RegGetValueW

ntdll

NtDeviceIoControlFile NtCancelIoFileEx NtReadFile NtOpenFile RtlNtStatusToDosError RtlGetVersion NtWriteFile NtCreateFile NtCreateNamedPipeFile

user32

RegisterRawInputDevices ReleaseCapture SetCapture MsgWaitForMultipleObjectsEx RegisterWindowMessageA SetParent MapWindowPoints GetWindow SetWindowDisplayAffinity GetWindowTextLengthW SetFocus ShowWindow GetWindowTextW ReleaseDC SetWindowTextW SetForegroundWindow MonitorFromPoint GetWindowRect SetWindowLongPtrW GetParent GetWindowLongPtrW FindWindowExW SetWindowRgn PostQuitMessage SendInput EnumDisplayMonitors EnableWindow IsWindowEnabled GetRawInputData IsProcessDPIAware GetDC GetKeyboardLayout DestroyIcon IsWindowVisible GetClipCursor ClipCursor ShowCursor DrawTextW GetMenu GetSystemMenu SetMenu EnableMenuItem SetWindowLongW SetPropW SystemParametersInfoA GetKeyState ToUnicodeEx OffsetRect GetMenuBarInfo DestroyMenu MapVirtualKeyExW EnumChildWindows GetKeyboardState AdjustWindowRect RedrawWindow GetAsyncKeyState SendMessageW IsIconic CreateIcon GetMessageW TranslateMessage DispatchMessageW PeekMessageW CreateAcceleratorTableW DrawIconEx CheckMenuItem DispatchMessageA GetMessageA RegisterClassExW DestroyAcceleratorTable GetForegroundWindow GetMenuItemInfoW DestroyWindow RemoveMenu CreatePopupMenu RegisterTouchWindow IsWindow CreateWindowExW CreateMenu AdjustWindowRectEx FlashWindowEx GetActiveWindow UpdateWindow InvalidateRect SetCursorPos TranslateAcceleratorW LoadCursorW InvalidateRgn SetWindowPos GetWindowPlacement SetWindowPlacement ChangeDisplaySettingsExW GetUpdateRect MapVirtualKeyW ValidateRect SetCursor CloseTouchInputHandle GetTouchInputInfo TrackMouseEvent SystemParametersInfoW SetMenuItemInfoW FillRect AppendMenuW GetSystemMetrics InsertMenuW GetMonitorInfoW MonitorFromRect MonitorFromWindow GetCursorPos ClientToScreen GetClientRect GetWindowLongW ScreenToClient GetWindowDC DrawMenuBar DefWindowProcW PostThreadMessageW PostMessageW TrackPopupMenu

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

comctl32

RemoveWindowSubclass TaskDialogIndirect SetWindowSubclass DefSubclassProc

ole32

RegisterDragDrop PropVariantClear CoTaskMemAlloc CoTaskMemFree CoInitializeEx CoCreateFreeThreadedMarshaler OleInitialize CoCreateInstance RevokeDragDrop CoInitialize CoUninitialize

gdi32

SetTextColor CreateRectRgn SetBkMode CombineRgn DeleteObject CreateCompatibleDC DeleteDC CreateSolidBrush SelectObject GetDeviceCaps BitBlt CreateDIBSection

dwmapi

DwmGetWindowAttribute DwmSetWindowAttribute DwmEnableBlurBehindWindow

shlwapi

SHCreateMemStream

shell32

SHOpenFolderAndSelectItems SHGetKnownFolderPath DragQueryFileW ILFree ShellExecuteW ILCreateFromPathW ShellExecuteExW DragFinish SHAppBarMessage SHCreateItemFromParsingName

oleaut32

GetErrorInfo SetErrorInfo SysFreeString SysStringLen

ws2_32

WSAStartup select getaddrinfo freeaddrinfo WSAGetLastError WSADuplicateSocketW shutdown listen bind WSASocketW WSACleanup connect ioctlsocket setsockopt send WSASend recv getsockname getsockopt getpeername accept closesocket WSAIoctl

crypt32

CertCloseStore CertFreeCertificateContext CertSetCertificateContextProperty CertFreeCertificateChain CertCreateCertificateChainEngine CertVerifyCertificateChainPolicy CertGetCertificateChain CertOpenStore CertAddEncodedCertificateToStore CertFreeCertificateChainEngine

bcrypt

BCryptGenRandom

api-ms-win-crt-math-l1-1-0

round log trunc pow log10 floor __setusermatherr roundf

api-ms-win-crt-string-l1-1-0

_wcsicmp strlen wcslen wcscmp strspn strcmp strcpy_s wcsncmp strcspn strncmp

api-ms-win-crt-convert-l1-1-0

wcstol _wtoi _ultow_s

api-ms-win-crt-heap-l1-1-0

free malloc _msize realloc _set_new_mode _callnewh calloc

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-time-l1-1-0

_localtime64_s

api-ms-win-crt-runtime-l1-1-0

_initterm_e exit _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _set_app_type _seh_filter_exe _endthreadex _initialize_onexit_table _register_onexit_function _crt_atexit _exit terminate _beginthreadex abort _initterm __p___argc

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale