Behavioral task
behavioral1
Sample
240-58-0x0000000000400000-0x0000000000451000-memory.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
240-58-0x0000000000400000-0x0000000000451000-memory.exe
Resource
win10v2004-20220812-en
General
-
Target
240-58-0x0000000000400000-0x0000000000451000-memory.dmp
-
Size
324KB
-
MD5
942cfe84da3a77980ca8633306f84c12
-
SHA1
ef13f037595c026d0ac374f5279a00946a9eb179
-
SHA256
583119aca29f233d06462987a7dd172247ff2fbe26c6801b1f048b7a295d8dbe
-
SHA512
1585d54a1a2e5e60a8f7c1cf0cf9187e261435d285ce3fecfdea9da06707f8b8cfd35aa065e539d9736dd1490a746da6a7c7a98cd7c050aacec28d5eea7471ac
-
SSDEEP
6144:5dN9JPeR5NZ+es0zjRThcSSlIvY50dV6KKqwAOYNO+eu0MU:5dN3W5NZ+edzjRTW/smF+efM
Malware Config
Extracted
nymaim
45.15.156.54
85.31.46.167
Signatures
-
Nymaim family
Files
-
240-58-0x0000000000400000-0x0000000000451000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ