Nexus Animal Company.zip
- SHA256 7ef76a7a93f56a861e11db9982c12e3c8eb3b350b0c0118894d3d68ffdac68b3
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Nexus Animal Company.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Nexus Animal Company.zip
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Nexus Animal Company/Animal Company.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
Nexus Animal Company/Animal Company.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
Nexus Animal Company/READ.txt
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
Nexus Animal Company/READ.txt
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target Nexus Animal Company.zip
- Size 40KB
- Sample260821-cc2tesep3x
- SHA256 7ef76a7a93f56a861e11db9982c12e3c8eb3b350b0c0118894d3d68ffdac68b3
- MD5 8794a439365ba6da56d0719eef21fbe2
- SHA1 9212cf9fffa77db1fe49ccd7ea384e95d7cdd623
- SHA512 325531c53e312a02b85602dcddea4e5e239c292ce249644180c122eb5ff5de25e99514b076fe59645b00e8fdaa6184e4c33326fa9d412d9ab4937429276c12f2
- SSDEEP 768:EBIWrIfMWsDaJHXKfFANKXSz1O2PyM0vzO1aD0bkOzII:EBIWrOwaZaYyuO2PydvysTyr
- TLSH T12613F1A4B826756ED21BE039E883C12E77D7F60BC9024B66C1573028B57946182BE4FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Nexus Animal Company/Animal Company.exe
File Explorer
-
Nexus Animal Company.zip.zip 40KB
-
Nexus Animal Company/Animal Company.exe.exe 111KB
-
Nexus Animal Company/READ.txt42B
Nexus Animal Company/Animal Company.exe
- IMPHASH 6778d2522f48fabfee8871c786e6bbe9
- SHA256 37e06ce252b4cb70997a3f023b36550e181faab9cb676e3a7056d054e720d51a
- MD5 1ca896739a29732f1444627a5076cd22
- SHA1 b9e53064ea215cb61a88dc732c99ff3d0faea38b
- SHA512 0bbd54cf7c3908207ca985c636e9d88373dff4f34adf6a53193ea226f5ecf27c8f504c43ae4d22c0dc3e85992d3f447257d058ad89129c1a33ca63f79c7636cc
- SSDEEP 1536:x4tZQiw/wMeuItaFdGU+jgee4f9oJtEjV+IeuNi21MRacmGJE7HPs5VJvdPSuGkR:WRx1YNv8QFMMARYRJ4Oai2U2
- TLSH T190B31A0AE9A2203DC367803ADF4A1515EAB07C9897995DFB73C14EB90DE25E07F3D612
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
82464
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WideCharToMultiByte
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetCurrentProcessId
msvcp140
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memmove
memset
memcpy
__current_exception
__current_exception_context
__std_terminate
__std_exception_copy
__std_exception_destroy
__C_specific_handler
_CxxThrowException
memcmp
api-ms-win-crt-heap-l1-1-0
free
_callnewh
malloc
_set_new_mode
api-ms-win-crt-string-l1-1-0
strlen
isdigit
isxdigit
api-ms-win-crt-time-l1-1-0
_time64
api-ms-win-crt-runtime-l1-1-0
_set_app_type
_get_narrow_winmain_command_line
_initterm
_initterm_e
exit
_exit
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_crt_atexit
terminate
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_exe
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Name
.text
Size
80KB
Virtual Size
79KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
27KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
140B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=259, version=35721,
count=10, id=260, version=35721,
count=27, id=261, version=35721,
count=6, id=257, version=35721,
count=3, id=257, version=33145,
count=61, id=1, productName=Unmarked objects,
count=1, id=265, version=36248,
count=1, id=258, version=36248,
Nexus Animal Company/READ.txt
- SHA256 9005c0aaef40164631642d96a35f15d69ea65682d94fe80b57bb5d238f7dccde
- MD5 24a0fb99e9ca84156c4c2f5c2bb5c298
- SHA1 5a8cd7c9c5f308c2f7d2fd0655118cdfcf51a7f2
- SHA512 e8e9cd58261160dacad65e46f45f6acf9a9ae1a6cfdecaab44ed8a88c42713a599a4713315225af42594203a2892bb82dcab328920cacc3ee606d4cdfd79f37d
- MD5 SHA1 SHA512