NOXPBPV2[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
NOXPBPV2.exe
Size 107KB
Sample260808-2m6msszvbx
SHA256 7f62ddc035e0b408bbdf46920772feaaa06e65662b67b000da0875bba0949d84
MD5 6ded3ef5fff5c976eb6941c3a52fd49c
SHA1 51b8070fb9a026448cd8920c2f52a9d847b5c358
SHA512 30ed1a396c70557460114a5ca0df6310938ac29e25ce8cf98a83413179442fe5a5303cb01aa0f94583c698b1cc69ddbb863fc0ba5a1b7489b9884a70ff2b2d68
SSDEEP 3072:vZ2mAJocBGjHfsT2pl8qidSUfQkHuIxte:vZ2mAJpGjHEib8qi9fQkHuGte
TLSH
T19CB35C17FB1911BDD11E86B8C5534D06DB72B89107A1B3CB6BD08AD60F569E8BF3EA00
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NOXPBPV2.exe

File Explorer

NOXPBPV2.exe

.exe 107KB

NOXPBPV2.exe

IMPHASH f944ff4d04d0cd1acf6dfa781c1b0649
SHA256 7f62ddc035e0b408bbdf46920772feaaa06e65662b67b000da0875bba0949d84
MD5 6ded3ef5fff5c976eb6941c3a52fd49c
SHA1 51b8070fb9a026448cd8920c2f52a9d847b5c358
SHA512 30ed1a396c70557460114a5ca0df6310938ac29e25ce8cf98a83413179442fe5a5303cb01aa0f94583c698b1cc69ddbb863fc0ba5a1b7489b9884a70ff2b2d68
SSDEEP 3072:vZ2mAJocBGjHfsT2pl8qidSUfQkHuIxte:vZ2mAJpGjHEib8qi9fQkHuGte
TLSH
T19CB35C17FB1911BDD11E86B8C5534D06DB72B89107A1B3CB6BD08AD60F569E8BF3EA00
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

66696

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

E:\randomm\Noxybpp\NOXYBP\x64\Release\NOXPBPV2.pdb

kernel32

ReadFile SetConsoleCtrlHandler SetConsoleTitleA SetConsoleScreenBufferSize GetStdHandle WriteFile SetConsoleMode SetCurrentConsoleFontEx CreateNamedPipeW SetConsoleWindowInfo CreateFileW CreateToolhelp32Snapshot Sleep GetConsoleMode GetLastError Process32NextW Process32FirstW CloseHandle Beep SetConsoleOutputCP ConnectNamedPipe InitializeSListHead GetSystemTimeAsFileTime GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId SetUnhandledExceptionFilter

shell32

ShellExecuteA

msvcp140

?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z ?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A ?_Xbad_alloc@std@@YAXXZ ?_Id_cnt@id@locale@std@@0HA ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z ?id@?$ctype@D@std@@2V0locale@2@A ?_Xlength_error@std@@YAXPEBD@Z ?id@?$collate@D@std@@2V0locale@2@A _Mtx_lock _Strcoll _Cnd_do_broadcast_at_thread_exit _Thrd_id _Thrd_detach _Xtime_get_ticks _Thrd_join _Mtx_unlock ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ ?good@ios_base@std@@QEBA_NXZ ?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?tolower@?$ctype@D@std@@QEBADD@Z ??1facet@locale@std@@MEAA@XZ ??0facet@locale@std@@IEAA@_K@Z ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ ?_Incref@facet@locale@std@@UEAAXXZ ?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ ??1_Locinfo@std@@QEAA@XZ ??0_Locinfo@std@@QEAA@PEBD@Z __crtLCMapStringA ?_Throw_Cpp_error@std@@YAXH@Z ??0_Lockit@std@@QEAA@H@Z ??1_Lockit@std@@QEAA@XZ _Strxfrm ?uncaught_exceptions@std@@YAHXZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memcmp memmove memset __C_specific_handler memcpy __current_exception __current_exception_context __std_exception_destroy __std_exception_copy __std_type_info_compare __RTtypeid _CxxThrowException __std_terminate strchr

api-ms-win-crt-heap-l1-1-0

free _set_new_mode realloc _callnewh malloc

api-ms-win-crt-string-l1-1-0

strcpy_s strlen wcscpy_s _wcsicmp

api-ms-win-crt-time-l1-1-0

_localtime64_s

api-ms-win-crt-runtime-l1-1-0

_crt_atexit _register_onexit_function _cexit _seh_filter_exe _set_app_type _get_initial_narrow_environment _initialize_narrow_environment _initterm_e exit _exit terminate __p___argc __p___argv _c_exit _register_thread_local_exe_atexit_callback _configure_narrow_argv system _beginthreadex _initialize_onexit_table _initterm

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s __stdio_common_vsscanf _set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

___lc_locale_name_func _configthreadlocale ___lc_collate_cp_func

api-ms-win-crt-math-l1-1-0

__setusermatherr