Static task
static1
Behavioral task
behavioral1
Sample
7eeac6a3d953925c97d157699ddced1ec9e78d8c7ad0d5b3ace6304816fbc3c6.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
7eeac6a3d953925c97d157699ddced1ec9e78d8c7ad0d5b3ace6304816fbc3c6.exe
Resource
win10-en-20211208
General
-
Target
7eeac6a3d953925c97d157699ddced1ec9e78d8c7ad0d5b3ace6304816fbc3c6.bin
-
Size
16KB
-
MD5
f0b950caec6f669f6aa4f0da3cf323cc
-
SHA1
0e3329c8f8d3845352fc3dc496c11cc3d3e0336c
-
SHA256
7eeac6a3d953925c97d157699ddced1ec9e78d8c7ad0d5b3ace6304816fbc3c6
-
SHA512
093ace21e7ac02d575044d77a5630975e195efd72a3ce588e9c06bdfdf7388fad0882fc51d26042737e5781f6198ee8b67ad7d63d307be884063719f46f6fa9c
-
SSDEEP
384:B71T+Rh/1xoOOHExMS4Q8bZKO5II69J1oBG:B7sxroOOHS2Xb8ij6Roo
Malware Config
Extracted
nworm
v0.3.8
eagleacct23.duckdns.org:6733
perobert37.duckdns.org:6733
57430af2
Signatures
-
Nworm family
Files
-
7eeac6a3d953925c97d157699ddced1ec9e78d8c7ad0d5b3ace6304816fbc3c6.bin.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ