Static task
static1
Behavioral task
behavioral1
Sample
App_global.asax.nntnq-ni.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
App_global.asax.nntnq-ni.dll
Resource
win10v2004-20220901-en
General
-
Target
App_global.asax.nntnq-ni.dll.zip
-
Size
1KB
-
MD5
08713871ff49ac733583d3763714468b
-
SHA1
33ac359a85f1e00a9faf881258f4c3f9d7123672
-
SHA256
63615e86bb82d97f1697ae5f22601cc4d7c01048c82bc647fc98e8726b90291b
-
SHA512
cdb814204184530683d4547c0af092af516d00eca7d9a8d7eab04539b1a41a77af14dfe2c61ff82b661aa71dc35c12a66cc9b9bed76fd28eeb4e91b884c18191
Malware Config
Signatures
Files
-
App_global.asax.nntnq-ni.dll.zip.zip
Password: infected
-
App_global.asax.nntnq-ni.dll.dll windows x86
Password: infected
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 744B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ