Static task
static1
Behavioral task
behavioral1
Sample
nvrshe.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
nvrshe.dll
Resource
win10v2004-20220812-en
General
-
Target
nvrshe.dll
-
Size
2.7MB
-
MD5
ccc8aa4c9e0296218625ea70e55929ed
-
SHA1
fea829e735e271d0aeb484d5ff89a1ea371064d9
-
SHA256
bda8df67435b22a372fbf1ca21b15cd0071f296e30e79b0af6e9cae1b7e0eb4c
-
SHA512
d3f73fc559c18c0ddee5996a29df6f8e54c9bbc842c08e006a4ce76a27b8239b172daccae4bf45078551b8f2fd72b76fed30d3cc5febd539030b5c52ce1a32a6
-
SSDEEP
24576:PcTI1P7zBZ2sD8WJ0k4uHNeURUSIt8Dlj7iXWx6RB6R1M1nzN241uENCo:PcTWZ2sDnl4uHNeUaSkO0mAN241uENT
Malware Config
Signatures
Files
-
nvrshe.dll.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rsrc Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ