nullmixer | 1320-88-0x0000000000400000-0x000000000051D000-memory[.]dmp

Sharing

Copy URL Twitter E-mail

General

Target
1320-88-0x0000000000400000-0x000000000051D000-memory.dmp
Size 1.1MB
Sample221104-mrmcdseda7
SHA256 915c25df5b9a5d4488b3aaa1b828b2069ca7bd7eb44ef42862d57c29451845b0
MD5 4b09c12b4061e809f8f6b8625b5d29c8
SHA1 eb9e37cbd22cc032a0b83b99ef91239e43b7c186
SHA512 7fb304e277eec338a2a1419d881c6c15ab94ca4035cfa10d6612816738dea058133b77ee07c9982e8f929d605d83be10c2709cc6d691332bcde704f8f2390537
SSDEEP 12288:p+duZYkYG+gIrbvh1RJbOT+iOrMNx05sYZJHZ+ZQZroMbmkRo0wcSnyrfjfvcQiu:pUuZYkYP/rbvhBOiiTNx+WLo
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

nullmixer

Malware Config

Extracted

Family

nullmixer

http://sokiran.xyz/

Signatures

Nullmixer family
nullmixer

File Explorer

1320-88-0x0000000000400000-0x000000000051D000-memory.dmp

.exe 1.1MB

1320-88-0x0000000000400000-0x000000000051D000-memory.dmp

SHA256 915c25df5b9a5d4488b3aaa1b828b2069ca7bd7eb44ef42862d57c29451845b0
MD5 4b09c12b4061e809f8f6b8625b5d29c8
SHA1 eb9e37cbd22cc032a0b83b99ef91239e43b7c186
SHA512 7fb304e277eec338a2a1419d881c6c15ab94ca4035cfa10d6612816738dea058133b77ee07c9982e8f929d605d83be10c2709cc6d691332bcde704f8f2390537
SSDEEP 12288:p+duZYkYG+gIrbvh1RJbOT+iOrMNx05sYZJHZ+ZQZroMbmkRo0wcSnyrfjfvcQiu:pUuZYkYP/rbvhBOiiTNx+WLo
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

1155073

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

175KB

Virtual Size

632KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

11KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

35KB

Virtual Size

232KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

/14

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

/29

Size

33KB

Virtual Size

100KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

/41

Size

2KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

/55

Size

9KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

/67

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

/80

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

/91

Size

11KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

/102

Size

1KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

4KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE