Static task
static1
Behavioral task
behavioral1
Sample
nvrsfi.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
nvrsfi.dll
Resource
win10v2004-20220901-en
General
-
Target
nvrsfi.dll
-
Size
252KB
-
MD5
7dad6aef310397f7debcf7d9d9ae2d2f
-
SHA1
8224faad9fb407b5682a59797e4b65cff446af45
-
SHA256
073f50eb02444aac875a466c8d2eeed956f2fc69219bd965578e70fa79d5ef21
-
SHA512
bcec0c3b49fd7e7da4a9ee7535616f769a4b991f630c9d53b6c1909c4f552f4b91bee55b2019c39fddf2fc70d4563d74cc0a259efed6231d2e3f1a3a18ab68c5
-
SSDEEP
3072:98WFLoHeivARYoP4apNlqoMmXeJpG7IYljHsg6YGYYxO4hPzbXF5Ak6:98WUqR4aBqoMmaSIYljrr
Malware Config
Signatures
Files
-
nvrsfi.dll.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rsrc Size: 244KB - Virtual size: 243KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ