ncstudio5[.]60[.]rar

Sharing

Copy URL Twitter E-mail

General

Target
ncstudio5.60.rar
Size 1.1MB
Sample260729-k481tadj4x
SHA256 016dae6fddf3429627787504794b65c7a3f4bec11441f5a33bd6096a1882e545
MD5 4ef08891133973d7dbddb5920819e1e5
SHA1 2d7b447f84608182c5956172a24a708bc507137f
SHA512 7919c445bfd34a267af8dea5c10507ac186e46de049b1812d1fda9e56c5acc65a6a1400b2bee8a6cfe77e5061d8d03d016884c8fd85839879c589a04fa27eb92
SSDEEP 24576:nYA52RPyQhkPRtjlzLCGdAkT/m1hxN1d9gLGlnEKNSF9rZ/ioEhfdFkw:nYI2RqQh+t9CswhxndcMEKgrZbEhd
TLSH
T1FD4533D5A0D2DF0B3AE869C9745C9CAB3C6911F971AEC488035E5E48F0802DE55EFDB2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Output/setup.exe

File Explorer

ncstudio5.60.rar

.rar 1.1MB
Output/IN打包脚本.iss

1KB
Output/setup.exe

.exe 1.1MB

ncstudio5.60.rar

SHA256 016dae6fddf3429627787504794b65c7a3f4bec11441f5a33bd6096a1882e545
MD5 4ef08891133973d7dbddb5920819e1e5
SHA1 2d7b447f84608182c5956172a24a708bc507137f
SHA512 7919c445bfd34a267af8dea5c10507ac186e46de049b1812d1fda9e56c5acc65a6a1400b2bee8a6cfe77e5061d8d03d016884c8fd85839879c589a04fa27eb92
SSDEEP 24576:nYA52RPyQhkPRtjlzLCGdAkT/m1hxN1d9gLGlnEKNSF9rZ/ioEhfdFkw:nYI2RqQh+t9CswhxndcMEKgrZbEhd
TLSH
T1FD4533D5A0D2DF0B3AE869C9745C9CAB3C6911F971AEC488035E5E48F0802DE55EFDB2
MD5 SHA1 SHA512 SSDEEP TLSH

Output/setup.exe

SHA256 759c56d9485e5188bc4070e24a5bead1f51b7b36f15b575063b6af93188f648a
MD5 c77b4b5ec8835e4ece59665c305e26ac
SHA1 a33b4251c4f99fdb92124242edc74d0d91425cc9
SHA512 2c95b831c167359c237df4a0bc7fc97730dde3eea2166788899eecba36fddbdb4547b9ce9902a511b2506f578613328915ddf42c233465b803acbebd4cd3b121
SSDEEP 24576:99JwrGI30zBXumVWkm2j3uiQJMen5cS4zxx5ZMhUQYWuShFu/xnySwB:K9P0j3m/74d7ZkruRySwB
TLSH
T1034523F288467D71D060AC708F1AC60E9937BB6BDD306212316EEE9D3F675C1A58E784
MD5 SHA1 SHA512 SSDEEP TLSH

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

39492

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

36KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

1024B

Virtual Size

588B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

ncstudio5.60.rar

Output/IN打包脚本.iss

Output/setup.exe

generic