Static task
static1
Behavioral task
behavioral1
Sample
d0980b7fe304d1998df7e3829b8f35c1f6a41316c8675416f5264d8658fc881e.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
d0980b7fe304d1998df7e3829b8f35c1f6a41316c8675416f5264d8658fc881e.exe
Resource
win10-en-20211208
General
-
Target
d0980b7fe304d1998df7e3829b8f35c1f6a41316c8675416f5264d8658fc881e.bin
-
Size
33KB
-
MD5
7341966dff36665a31185cb2b4331f0d
-
SHA1
02572e87b124474b1553e9bc418f7c8a4248be70
-
SHA256
d0980b7fe304d1998df7e3829b8f35c1f6a41316c8675416f5264d8658fc881e
-
SHA512
94e4be60b3508a3e9868ffee630f37c21104be85a8c412c8edc7924af8b60f73bdd183eba89133afb54d01cfe88ec26b68cff1870b86cf3459e8c7505c229a93
-
SSDEEP
384:VW4pDioPdaPEyojE1TSNoI3MZwmwQM9hvNEyD/XMGbsh5uYj7G4Esd7ay+o4ZaO:MAmo1k1kbQM9bE2/nbsuE7GTM8dec
Malware Config
Extracted
nworm
v0.3.8
Jonathin8068-24257.portmap.host:60149
9c5336ac
Signatures
-
Nworm family
Files
-
d0980b7fe304d1998df7e3829b8f35c1f6a41316c8675416f5264d8658fc881e.bin.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ