Login
Reports
Static
static
3
Download Sample
Feedback
Sharing
Copy URL
Twitter
E-mail
Static task
static1
1 signatures
General
Target
NetCat GUI v1.2.zip
Size
2.3MB
Sample
260930-b3tp3asw8m
SHA256
42b431ecf5ada2165f9a15805f7b612d07bebe8539aa997c6b6ae8a0ae9f3923
MD5
62fe8d198463f1c6193bbbbf2828c451
SHA1
321ca4069416ddd2b4c7457b6faf6e6e312845cf
SHA512
d1fd7242df72000094d44e4fb054ea7a3ec89cacd0b3f1981470852c06b2bb236c42c167e9f27eb3197015946c8a37d8003f96abaf108ffb032119f095b339d3
SSDEEP
49152:7CZ05X6b8roO99u83f12QPOSPefyECEBySltoOriDHWWRg4BWipwG/cUt1yeBU:7CZcX6gHzzv1bPupeDH/Rg4wcw0cw1yj
TLSH
T1C2B533EC106E1A05E86919287F53F47D9DD5FFB64048272C838E722362BE1753EA258F
MD5
SHA1
SHA512
SSDEEP
TLSH
Score
3
/10
Malware Config
Signatures
Unsigned PE
1 IoCs
Checks for missing Authenticode signature.
resource
unpack001/NetCat GUI v1.2.exe
File Explorer
NetCat GUI v1.2.zip
.zip
2.3MB
NetCat GUI v1.2.exe
.exe
6.5MB
NetCat GUI v1.2.zip
SHA256
42b431ecf5ada2165f9a15805f7b612d07bebe8539aa997c6b6ae8a0ae9f3923
MD5
62fe8d198463f1c6193bbbbf2828c451
SHA1
321ca4069416ddd2b4c7457b6faf6e6e312845cf
SHA512
d1fd7242df72000094d44e4fb054ea7a3ec89cacd0b3f1981470852c06b2bb236c42c167e9f27eb3197015946c8a37d8003f96abaf108ffb032119f095b339d3
SSDEEP
49152:7CZ05X6b8roO99u83f12QPOSPefyECEBySltoOriDHWWRg4BWipwG/cUt1yeBU:7CZcX6gHzzv1bPupeDH/Rg4wcw0cw1yj
TLSH
T1C2B533EC106E1A05E86919287F53F47D9DD5FFB64048272C838E722362BE1753EA258F
MD5
SHA1
SHA512
SSDEEP
TLSH
NetCat GUI v1.2.exe
SHA256
be41233a3a7559411b02458ffb45654e2f33b096a7513af4ad1cf685d2b75811
MD5
5212c2a6844d26d4db8660d04a9dc1ec
SHA1
09461d0383bec38e1015733acef21a7e6aea186a
SHA512
c2c90fb2581c080829e994d4cc5e06c71e50fdbe0a6f89ed99f0b7d836315124e18ec066710f11e8010faa123ca80735f4dd0ab3bc20a2c791996ea11f80b8ba
SSDEEP
49152:1fqiRfbOajjkPV5M6BEng14kVsAtLMu5fnChs/V7aqONj9o0eXDRNnxfJtqUrSPu:GajjQ5M6Bcg1uAt3/VuqON6
TLSH
T1B466D331BEA88B2BD85E46FDC02DCD7042ECCA45E34EE7D617857FA43852790890E997
MD5
SHA1
SHA512
SSDEEP
TLSH
windows:4
windows
x86
arch:x86
Unsigned PE
Checks for missing Authenticode signature.
Headers
Sections
Subtype
Minor OS version
0
Major OS version
4
Entry point
1226462
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
33KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.enigma1
Size
5.0MB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.enigma2
Size
280KB
Virtual Size
280KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic