Behavioral task
behavioral1
Sample
1704-73-0x0000000000400000-0x00000000015F9000-memory.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1704-73-0x0000000000400000-0x00000000015F9000-memory.exe
Resource
win10v2004-20220812-en
General
-
Target
1704-73-0x0000000000400000-0x00000000015F9000-memory.dmp
-
Size
18.0MB
-
MD5
58b6ede66b0a0d2238d98c8c77cd0563
-
SHA1
41e75a0062aba4e5cf1d17105da629d1218e47d2
-
SHA256
534a57b9026987d20c50fac3099810fb898a939f0188acfa6994f963b72933d2
-
SHA512
b3a3fd01495f4865f2080b9c1cbc96cf0d9012949de000cd12329e7fdd8ccf145b0897fd6a9efe77290744eb890cd947d9aacc1dd165af5f3d8388bca6ef5814
-
SSDEEP
12288:MMNVFul7U9/wR/BPghnKZad2WB/m96kfLOSfmifvWG:6/IBX/SOUJ
Malware Config
Extracted
nymaim
45.15.156.54
85.31.46.167
Signatures
-
Nymaim family
Files
-
1704-73-0x0000000000400000-0x00000000015F9000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 178KB - Virtual size: 178KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ