Behavioral task
behavioral1
Sample
516-77-0x0000000000400000-0x0000000001378000-memory.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
516-77-0x0000000000400000-0x0000000001378000-memory.exe
Resource
win10v2004-20220812-en
General
-
Target
516-77-0x0000000000400000-0x0000000001378000-memory.dmp
-
Size
15.5MB
-
MD5
507e35fc47ecdefa338d7572ba76d1e9
-
SHA1
e11685daeefa0478c95b459af151e939e28c54fe
-
SHA256
32c6a9a0d326c6c48053b8c6579c14425d10c20f8a9ff9399679122fb5587ee0
-
SHA512
b8e2b33cb7143e38f7d5fa719e4d78e7481bfdfc79ecbd38f9cae2479e87e9ec139610cb3f9ce6a5f9781ff902bf13c7221067d710988cbba66de79abe924814
-
SSDEEP
12288:vga47jEnle/EQPlm0Nz70jNS9BQaZlFMLOSfmitG:Hnlf7iBLvSOj
Malware Config
Extracted
nymaim
45.139.105.171
85.31.46.167
Signatures
-
Nymaim family
Files
-
516-77-0x0000000000400000-0x0000000001378000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 177KB - Virtual size: 177KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ