nb.exe
First submission 2024-10-12 00:22:03
| File type: |
PE32 executable (console) Intel 80386, for MS Windows |
| Mime type: |
application/x-dosexec |
| File size: |
36.0 KB (36864 bytes) |
| Compile time: |
2008-04-09 01:27:27 |
| MD5: |
f01a9a2d1e31332ed36c1a4d2839f412 |
| SHA1: |
90da10004c8f6fafdaa2cf18922670a745564f45 |
| SHA256: |
c9d5dc956841e000bfd8762e2f0b48b66c79b79500e894b4efa7fb9ba17e4e9e |
| Import Hash : |
2fa43c5392ec7923ababced078c2f98d |
| Sections 3 |
.text
.rdata
.data
|
| Directories 1 |
import
|
URLs, FQDN and IP indicators 1
| URL |
Host (FQDN/IP) |
Date Added |
hXXp://34.142.201.103:8443/nb.exe  |
34.142.201.103 |
2024-10-12 00:22:03 |
| Name |
VAddress |
VSize |
Size |
SHA1 |
MD5 |
Suspicious |
| .text |
0x1000 |
0x4400 |
20480 |
33c77681566ec827b08dbc182e9e273bfc205c5e |
b99af79097690cf2611475ea85b9fa60 |
|
| .rdata |
0x6000 |
0x17ba |
8192 |
5b778e16f2c75d504d8e1e769ed3a2d820993803 |
d970a1b87a05ec4449e60546b6f31a63 |
|
| .data |
0x8000 |
0x4c0 |
4096 |
08690af4cc4c4ade7664074ae6e515961bda65d0 |
4c5c817648df69cccf2e3f2d1375363c |
|
| Microsoft Visual C++ v6.0 |
| Microsoft Visual C++ 5.0 |
| Microsoft Visual C++ |
Strings analysis - File found
| Library |
| MSVCRT.dll |
| KERNEL32.dll |
| WSOCK32.dll |
Strings analysis - Possible IPs found 1
Strings analysis - Possible URLs found 1
| http://www.unixwiz.net/tools/ |