Static task
static1
Behavioral task
behavioral1
Sample
d9e0e8462d3d151c5f0179452dfca015d3ea13ca958d5b18abcbbe5d7907a7a2.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
d9e0e8462d3d151c5f0179452dfca015d3ea13ca958d5b18abcbbe5d7907a7a2.exe
Resource
win10-en-20211208
General
-
Target
d9e0e8462d3d151c5f0179452dfca015d3ea13ca958d5b18abcbbe5d7907a7a2.bin
-
Size
16KB
-
MD5
a334f17c3c5cd82a43480d74d7cd2f42
-
SHA1
bb00cbbb1114e7d002c8f03156760ce264160489
-
SHA256
d9e0e8462d3d151c5f0179452dfca015d3ea13ca958d5b18abcbbe5d7907a7a2
-
SHA512
5a517b19467422b8ff34c973d9b695ab81d175e9e4625825f4c95890f15eae82acff5298fb6a67752c1e1b71d4dbbacad5b155fc248595d151ac0aad9be1520e
-
SSDEEP
384:871T+Rh/1xo3OiLoE0PkQ8bQKisidcgXr+oBU:87sxro3OiLowXbPi9+GioK
Malware Config
Extracted
nworm
v0.3.8
34.176.64.245:1234
gamers2020.ownip.net:1234
af517389
Signatures
-
Nworm family
Files
-
d9e0e8462d3d151c5f0179452dfca015d3ea13ca958d5b18abcbbe5d7907a7a2.bin.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ