NanoCore_92e7f8df9827c1d696f9a273713ee994_exe_2019-07-09_09_30.txt

* MalFamily: ""

* MalScore: 1.0

* File Name: "NanoCore_92e7f8df9827c1d696f9a273713ee994.exe"
* File Size: 380416
* File Type: "PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows"
* SHA256: "126975f5bb49bddf9fc443113854e0ff0296dbcf1eb0606dc78dece3d1c9550c"
* MD5: "92e7f8df9827c1d696f9a273713ee994"
* SHA1: "24376786a18ebf0b2c4511a79bfe0d7956bba18b"
* SHA512: "3318bd5208d4a4ff32da95c088476a4285a240e274afd28944ac1faafe03a9fe0a6f803a21f320c18da7a18373ebbbfa2dcd059d1c5d6cbd6c2aa3678617e5ff"
* CRC32: "A1FCF0C0"
* SSDEEP: "6144:V69wjYr2YjO2b11kaOnchCuaJaYmLFV3KEsYKkQatPxLHLlMz90tuj6:V69nSEqgUazFwELQ4PxmzWuj"

* Process Execution:

* Executed Commands:

* Signatures Detected:

        "Description": "The binary likely contains encrypted or compressed data.",
        "Details":

                "section": "name: .text, entropy: 7.95, characteristics: IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ, raw_size: 0x0005c400, virtual_size: 0x0005c394"





* Started Service:

* Mutexes:

* Modified Files:

* Deleted Files:

* Modified Registry Keys:

* Deleted Registry Keys:

* DNS Communications:

* Domains:

* Network Communication - ICMP:

* Network Communication - HTTP:

* Network Communication - SMTP:

* Network Communication - Hosts:

* Network Communication - IRC: