General

  • Target
    Nacho.exe
  • Size 1018KB
  • Sample261009-xwat9sty5p
  • SHA256 1692fd80f835f085e0ec3d821172759a8294c1226cf7395994729a4f160b0a9a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • Nacho.exe
    .exe 1018KB
  • costura.dll
    .dll 5KB
  • costura.pdb
    7KB
  • microsoft.bcl.asyncinterfaces.dll
    .dll 27KB
  • microsoft.web.webview2.core.dll
    .dll 681KB
  • microsoft.web.webview2.winforms.dll
    .dll 37KB
  • microsoft.web.webview2.wpf.dll
    .dll 84KB
  • naudio.dll
    .dll 428KB
  • system.buffers.dll
    .dll 23KB
  • system.io.pipelines.dll
    .dll 83KB
  • system.memory.dll
    .dll 141KB
  • system.numerics.vectors.dll
    .dll 107KB
  • system.runtime.compilerservices.unsafe.dll
    .dll 18KB
  • system.text.encodings.web.dll
    .dll 85KB
  • system.text.json.dll
    .dll 885KB
  • system.threading.tasks.extensions.dll
    .dll 27KB

Nacho.exe

  • SHA256 1692fd80f835f085e0ec3d821172759a8294c1226cf7395994729a4f160b0a9a
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\Gebruiker\source\repos\Nacho\Nacho\obj\x64\Release\Nacho.pdb