NexusTweaks[.]rar | Triage™

General

Target
NexusTweaks.rar
Size 1.7MB
Sample260820-2edbaaga99
SHA256 605f225afb0165f4047567eb4dd65d39479d89f10f0046258155cb02862dc77b
MD5 4ffb6720e74109721447f97b4b1cad40
SHA1 c0c1e5c5efd7ca22f1e06c82bfa694fb229b24db
SHA512 a86ef2dde0a0463ba219b17c6001c573ffd30ca4f34eb97bcc7cf5359fb532eb6671cd99197dbde8a8ce9706905d10b94d7830a849f770cfb2c3f46820b5afe4
SSDEEP 24576:1dosfcyyiYm/3YFQy407LjPrUBtK66PVBVARNj1xDoA+bCOFAQruZAhN6vpi0PXv:1z0ylYYupBz2KBBVcEANQK2Si0PV79L
TLSH
T1CA8533EC8B0C2379B2D997DC51ADC4711F750099BAD2EE9DABC1F29DA004E6D7CE0162
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/NexusTweaks.exe

File Explorer

NexusTweaks.rar

.rar 1.7MB
NexusTweaks.exe

.exe 1.7MB

NexusTweaks.rar

SHA256 605f225afb0165f4047567eb4dd65d39479d89f10f0046258155cb02862dc77b
MD5 4ffb6720e74109721447f97b4b1cad40
SHA1 c0c1e5c5efd7ca22f1e06c82bfa694fb229b24db
SHA512 a86ef2dde0a0463ba219b17c6001c573ffd30ca4f34eb97bcc7cf5359fb532eb6671cd99197dbde8a8ce9706905d10b94d7830a849f770cfb2c3f46820b5afe4
SSDEEP 24576:1dosfcyyiYm/3YFQy407LjPrUBtK66PVBVARNj1xDoA+bCOFAQruZAhN6vpi0PXv:1z0ylYYupBz2KBBVcEANQK2Si0PV79L
TLSH
T1CA8533EC8B0C2379B2D997DC51ADC4711F750099BAD2EE9DABC1F29DA004E6D7CE0162
MD5 SHA1 SHA512 SSDEEP TLSH

NexusTweaks.exe

SHA256 13b41d83822e4bfd1ef47775ee6ae21062fa621cfdcf055affd1bcd1a5a729bc
MD5 1b1c50ba6b017093aa36b495c694dd90
SHA1 d15b9417e93a2257a0c3899089b028a78195ce50
SHA512 753972301b93f26fffec4da1c90bf0b235017494faaca3aa17c516a1b312a2a2cc5d0eaa1bb5fe5fe24c9c83f6e9a8742fc7c11b76932625915352d086f4fa4d
SSDEEP 24576:7G44b+JFrltU3oX+HVXlKIDd4sWxLsz/c+Se00fZIPM7WKxj76dEThxP+S5zi:7g+7RaDHVEI3/cfxkRj7QSfWv
TLSH
T1EF85336961DF6B56DDF4727ACA7BC7663207A621FC036B96263C3C940E00DC367C6298
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Sharing