Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.Nymaim.238.22174.22275.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan.Nymaim.238.22174.22275.exe
Resource
win10v2004-20220812-en
General
-
Target
SecuriteInfo.com.Trojan.Nymaim.238.22174.22275.exe
-
Size
649KB
-
MD5
a0c80c6680c390fae1ea89cb343a321b
-
SHA1
9190c9f480d949b492e4bf35685031c945c2fc18
-
SHA256
cdfac6633cc08e3c9a63cc75386085ff3ebda02d010ab880fa0985d607291569
-
SHA512
a7757b6176042cd72a57dedf41afb086a4e82f656d710b13c388a26b87ea806da25fb2accb3d3d5f5f20fa342bc417b33ef8f479009caefc03e23a09653b647f
-
SSDEEP
12288:2XsPXqcf00rzOfWwuPDp5rztivzMiNt6jaDElwJZvgB3W3alPMA+5kupuuv:2XsPagRzBwIpHivz/i+iwJZvgBm3GMPW
Malware Config
Signatures
Files
-
SecuriteInfo.com.Trojan.Nymaim.238.22174.22275.exe.exe windows x86
79420f1baa63b40963b5cae8cd85925b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
rsaenh
CPDecrypt
CPEncrypt
CPCreateHash
CPDeriveKey
kernel32
GetCurrentThreadId
LoadLibraryExW
WriteConsoleW
GetShortPathNameW
SetLastError
HeapReAlloc
VirtualAlloc
OpenFileMappingW
CreateSemaphoreA
LoadLibraryA
CreateThread
OpenMutexA
lstrcmp
FindClose
Sections
.text Size: 644KB - Virtual size: 643KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ