Behavioral task
behavioral1
Sample
320-73-0x0000000000400000-0x0000000001649000-memory.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
320-73-0x0000000000400000-0x0000000001649000-memory.exe
Resource
win10v2004-20220812-en
General
-
Target
320-73-0x0000000000400000-0x0000000001649000-memory.dmp
-
Size
18.3MB
-
MD5
46a5c7b5c411baffbe6a5b052ac79b1d
-
SHA1
61381d911c3e20199fa453cc4fb11b9ada6efd80
-
SHA256
63a0d8281d61c6188b19fc7b6a6d89f2d764fa6ec4a22a1f540dc1b90162d7c2
-
SHA512
aa218a2d72c7baf0fb033b47d87e90b8a4ef3c9b7ab3e1f11ed81332be3543b0295e69fefc4a8d1b1315bd7a37525665df42abb1a49a41ddf16afc5cea5a44f4
-
SSDEEP
12288:sVtFVPSRE53jT9U/whnKZad2WB/m9bkLOSfmi8xG:hHIBSSO2
Malware Config
Extracted
nymaim
45.139.105.171
85.31.46.167
Signatures
-
Nymaim family
Files
-
320-73-0x0000000000400000-0x0000000001649000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 178KB - Virtual size: 178KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ