Static task
static1
Behavioral task
behavioral1
Sample
nixware.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
nixware.exe
Resource
win10v2004-20221111-en
General
-
Target
nixware.exe
-
Size
187KB
-
MD5
ebaded2e2952833f106a4a32698e1bbc
-
SHA1
12db1a36e6ad4274c0cba03961a8830c8cdd628d
-
SHA256
3d84994bb4e2aaefcba575a3a32f28183b567842290a030d0102f5001bc75e8c
-
SHA512
dd27bf71edb700f647039569ab98b51563ea90c7fc56545d501d0ae885d421bdaac01c6b141e7459fb5c150c931661943e35935565edf1465a601c3892dba279
-
SSDEEP
3072:te/7V9ywXV3iExuJRX1Njcuf2aMnJN1pL4aSq313tm2q8Wfu7zTwyN/Nk+gph:wzFyExgFN3uaWJLpEaj31dNqAHTwyN/I
Malware Config
Signatures
Files
-
nixware.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
4U,"T Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ