Behavioral task
behavioral1
Sample
524-87-0x0000000000400000-0x0000000001373000-memory.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
524-87-0x0000000000400000-0x0000000001373000-memory.exe
Resource
win10v2004-20220812-en
General
-
Target
524-87-0x0000000000400000-0x0000000001373000-memory.dmp
-
Size
15.4MB
-
MD5
7a9e4f53f23a36030db3484f94c34add
-
SHA1
b1a7c60deccd63b8360c0433a3f132f0a1c6dea8
-
SHA256
673e8178da196f766578bf2cb4b742348711b3aba846bb2c876ba9b06fa04756
-
SHA512
2cf1c7b52020fc7d4d9f700dc6220c75c3b287ffffea4c4259ab7e2f167fc2200010f798dbd41de22e81eb29ce4b945cc91e5111de333b8a8401b45139de567d
-
SSDEEP
12288:vga47jEnle/EQPlm0Nz70jNS9BQaZxFFLOSfmihG:Hnlf7iB/8SO3
Malware Config
Extracted
nymaim
45.139.105.171
85.31.46.167
Signatures
-
Nymaim family
Files
-
524-87-0x0000000000400000-0x0000000001373000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 177KB - Virtual size: 177KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ