NanoCore_4050826769f8afabe3cca14e68c0d430_exe_2019-07-09_09_30.txt

* MalFamily: ""

* MalScore: 1.0

* File Name: "NanoCore_4050826769f8afabe3cca14e68c0d430.exe"
* File Size: 738816
* File Type: "PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows"
* SHA256: "da7a045abc5dbd2bcf8c25f4c5c5b2dada2cbae34f862554f3a1caf62fff5189"
* MD5: "4050826769f8afabe3cca14e68c0d430"
* SHA1: "b3905a2f406cf29bac647debe7d3ef5907abf821"
* SHA512: "9d817737bac3783cdb8aea926825348888bca58dd35b53d6d55faf1d3a3cd260d9135c6dc8c584624b794e1779e7f84606f1068de05444fdc4d849c3554b70ed"
* CRC32: "1C50FCED"
* SSDEEP: "12288:n8oPD0cVnK/1xrt14Iusb13cad+P0dQFSVtZzq9l4KQEhYxHOu2jTdJ5ZCxQMwtA:b0cstNsLsb13EPNSDNi4vxeb525wtWoo"

* Process Execution:
    "NanoCore_4050826769f8afabe3cca14e68c0d430.exe"


* Executed Commands:

* Signatures Detected:

        "Description": "The binary likely contains encrypted or compressed data.",
        "Details":

                "section": "name: .text, entropy: 7.98, characteristics: IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ, raw_size: 0x000b3c00, virtual_size: 0x000b3a54"





* Started Service:

* Mutexes:

* Modified Files:

* Deleted Files:

* Modified Registry Keys:

* Deleted Registry Keys:

* DNS Communications:

* Domains:

* Network Communication - ICMP:

* Network Communication - HTTP:

* Network Communication - SMTP:

* Network Communication - Hosts:

* Network Communication - IRC: