nymaim | 1688-58-0x0000000000400000-0x000000000045F000-memory[.]dmp | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

1688-58-0x...ry.exe

windows7-x64

1688-58-0x...ry.exe

windows10-2004-x64

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

1688-58-0x0000000000400000-0x000000000045F000-memory.exe

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

1688-58-0x0000000000400000-0x000000000045F000-memory.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

General

Target

1688-58-0x0000000000400000-0x000000000045F000-memory.dmp
Size

380KB
MD5

1f8c3419506475eb4401546ce18ecaa0
SHA1

07d858021bf5c96536a3f6b218fc0170c46ee832
SHA256

b07624aeabd8c7c7847841cf819ea85f0d06ef6d90072015d690fc3ef753ce8d
SHA512

c1b9394d0bab4d19e35bf3c9aa8f7202aaa2795123904e857185b4e0577c90359d243a500b3cfb48bfedeb98b45dff830797fc6d4a0b79f08a14f4f5bb07bd58
SSDEEP

6144:Udt56eh8ITcleMH9SDomjDBvMYos+CmDyZYIMsCIxl0J8ktMAODrg9iga3wVfg:Udt56ehi/H9SDomjDBvMYojCmDu7pVgI

Score

10^/10

nymaim

Malware Config

Extracted

Family

nymaim

C2

208.67.104.97

85.31.46.167

Signatures

Nymaim family
nymaim

Files

1688-58-0x0000000000400000-0x000000000045F000-memory.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.