Static task
static1
Behavioral task
behavioral1
Sample
nvrspl.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
nvrspl.dll
Resource
win10v2004-20221111-en
General
-
Target
nvrspl.dll
-
Size
256KB
-
MD5
f2c8fab14f36d76ee95de84d2f6313de
-
SHA1
7323808bd5fd6c9abff186f76e9b5d928f047699
-
SHA256
bf26fb401dcd3f226b7fe243f0e7af1bbc48c451aa3519773e5dbd4c194bc9b0
-
SHA512
dc4db32208526d78fa8edf8efabc4bbac6866d7e9a6e5400a760dbb7733f786c2094f85cf02dd9cd3c7857f49379b1cd85ce2aa7b0b68c30e969a0b6a8f8268c
-
SSDEEP
6144:6XqR4aBqoMmaSIYlj91Q3PuGwCCzWLZInbZv:KqRZwoD
Malware Config
Signatures
Files
-
nvrspl.dll.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rsrc Size: 248KB - Virtual size: 245KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ