nymaim | 1484-78-0x0000000000400000-0x0000000001552000-memory[.]dmp

General

Target
1484-78-0x0000000000400000-0x0000000001552000-memory.dmp
Size 17.3MB
Sample221208-kffpcshd65
SHA256 6196a90d75e39d277b3173b31ac54b4ff88ca1548fd1a723c54a2206911c0309
MD5 7532b391bad19ecd712153b0d3f733c1
SHA1 96379f8c63ff8c85301a2702b10e027a1054e9af
SHA512 51d8c4c8437edcc68fd2482f973e3e274e4acbb3d26ae2d108a345860913ddc329ff0c2f886c0741109d3fc72547c7283e43e0170a9a269b8ae5e7b11f4875c8
SSDEEP 12288:vga47jEnle/EQPlm0Nz70jNS9BQaZpFOLOSfmiJG:Hnlf7iBv1SOr
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

nymaim

Family

C2

SHA256 6196a90d75e39d277b3173b31ac54b4ff88ca1548fd1a723c54a2206911c0309
MD5 7532b391bad19ecd712153b0d3f733c1
SHA1 96379f8c63ff8c85301a2702b10e027a1054e9af
SHA512 51d8c4c8437edcc68fd2482f973e3e274e4acbb3d26ae2d108a345860913ddc329ff0c2f886c0741109d3fc72547c7283e43e0170a9a269b8ae5e7b11f4875c8
SSDEEP 12288:vga47jEnle/EQPlm0Nz70jNS9BQaZpFOLOSfmiJG:Hnlf7iBv1SOr
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

62641

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths