Static task
static1
Behavioral task
behavioral1
Sample
569576bc9e4cc25c0e01e57a76072605e5521aecd49f17ce6a02a515ec809897.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
569576bc9e4cc25c0e01e57a76072605e5521aecd49f17ce6a02a515ec809897.exe
Resource
win10-en-20211208
General
-
Target
569576bc9e4cc25c0e01e57a76072605e5521aecd49f17ce6a02a515ec809897.bin
-
Size
16KB
-
MD5
e0b2e3bfe7bb0d1e0299b92039959d25
-
SHA1
58c5d065b3be45b6ad8eb649c8987a2370f2b6a0
-
SHA256
569576bc9e4cc25c0e01e57a76072605e5521aecd49f17ce6a02a515ec809897
-
SHA512
0a3ebbd64f44c503509db74f75286af18a8f79534fea692e547f4669eeb132219e953fa935ae836712a1a617d558e346712a841bb29f39c00bb00a00e19906ad
-
SSDEEP
384:+71T+Rh/1xoFBBlDQ8bvK6HFc7INfoB4:+7sxroHfXbiUmcRoS
Malware Config
Extracted
nworm
v0.3.8
127.0.0.1:1111
c8351ca1
Signatures
-
Nworm family
Files
-
569576bc9e4cc25c0e01e57a76072605e5521aecd49f17ce6a02a515ec809897.bin.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ