Behavioral task
behavioral1
Sample
1736-73-0x0000000000400000-0x000000000155F000-memory.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1736-73-0x0000000000400000-0x000000000155F000-memory.exe
Resource
win10v2004-20221111-en
General
-
Target
1736-73-0x0000000000400000-0x000000000155F000-memory.dmp
-
Size
17.4MB
-
MD5
78f2aed1fb343b49c2f0f28104949770
-
SHA1
90f304693f269a90af4e1d45d9e2250173ba9d5e
-
SHA256
f2096be37c9e39c016bd11eb175057af7a41864a10815fcb948f3fc7d92f0df4
-
SHA512
b845949dfc9380e60d10e1bd8947df4e1e9c7bd7559ec126cc7f390b195a79d94cbafdc9c50ebbdc4a7e6c29c611287760451ac7cd68a0aaafdba177a12e911d
-
SSDEEP
12288:vga47jEnle/EQPlm0Nz70jNS9BQaZzFvLOSfmi6G:Hnlf7iB1CSOS
Malware Config
Extracted
nymaim
45.139.105.171
85.31.46.167
Signatures
-
Nymaim family
Files
-
1736-73-0x0000000000400000-0x000000000155F000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 177KB - Virtual size: 177KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ