General

  • Target

    New_NZM_netapi_bot.rar

  • Size

    226KB

  • MD5

    4d691657be055879d7961a5ccf845f1b

  • SHA1

    2ed412dff75f467cbac71bd477cd0419dfbcdfcf

  • SHA256

    66f2557f751b2590d51c40bb5688cc1872c991f8b50f72d32d214b50b4fa81dd

  • SHA512

    d1558669f346d404fb4447daf50c8df1831f63109acc3e30e2fe63d77dfa2e4d54eb48372daff06039b1bd4ec56e246b29a8f433e4964976fe25b6f59eaf88e7

  • SSDEEP

    6144:SmsA1aJfOwMV8Ll+w4VvX/TU0c/r4iKj+oMBLYhMpu:D1aJ2Mow4pP3iKjxMBhu

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • New_NZM_netapi_bot.rar
    .rar

    Password: infected

  • New NZM netapi bot/MD5ChecksumTest.exe
    .exe windows x86

    Password: infected

    45d8cb55bcfec04939099fc1affdfcce


    Headers

    Imports

    Sections

  • New NZM netapi bot/commands.txt
  • New NZM netapi bot/config/cfg.h
  • New NZM netapi bot/cpp/core/aliaslog.cpp
  • New NZM netapi bot/cpp/core/autostart.cpp
  • New NZM netapi bot/cpp/core/download.cpp
  • New NZM netapi bot/cpp/core/ehandler.cpp
  • New NZM netapi bot/cpp/core/fphost.cpp
  • New NZM netapi bot/cpp/core/irc_send.cpp
  • New NZM netapi bot/cpp/core/loaddlls.cpp
  • New NZM netapi bot/cpp/core/misc.cpp
    .vbs
  • New NZM netapi bot/cpp/core/netutils.cpp
  • New NZM netapi bot/cpp/core/nzm.cpp
  • New NZM netapi bot/cpp/core/nzm.cpp.bak
  • New NZM netapi bot/cpp/core/processes.cpp
  • New NZM netapi bot/cpp/core/random.cpp
  • New NZM netapi bot/cpp/core/rndnick.cpp
  • New NZM netapi bot/cpp/core/shellcode.cpp
  • New NZM netapi bot/cpp/core/sysinfo.cpp
  • New NZM netapi bot/cpp/core/threads.cpp
  • New NZM netapi bot/cpp/core/wildcard.cpp
  • New NZM netapi bot/cpp/exploits/advscan.cpp
  • New NZM netapi bot/cpp/exploits/dcom.cpp
  • New NZM netapi bot/cpp/exploits/ftpd.cpp
  • New NZM netapi bot/cpp/exploits/ms04_007_asn1.cpp
  • New NZM netapi bot/cpp/exploits/netapi.cpp
  • New NZM netapi bot/cpp/exploits/tftpd.cpp
  • New NZM netapi bot/cpp/md5.cpp
  • New NZM netapi bot/cpp/patcher.cpp
  • New NZM netapi bot/cpp/version.c
  • New NZM netapi bot/cpp/vncps.cpp
  • New NZM netapi bot/headers/advscan.h
  • New NZM netapi bot/headers/aliaslog.h
  • New NZM netapi bot/headers/autostart.h
  • New NZM netapi bot/headers/dcom.h
  • New NZM netapi bot/headers/defines.h
  • New NZM netapi bot/headers/download.h
  • New NZM netapi bot/headers/ehandler.h
  • New NZM netapi bot/headers/externs.h
  • New NZM netapi bot/headers/fphost.h
  • New NZM netapi bot/headers/ftpd.h
  • New NZM netapi bot/headers/ftppot.h
  • New NZM netapi bot/headers/functions.h
  • New NZM netapi bot/headers/globals.h
  • New NZM netapi bot/headers/includes.h
  • New NZM netapi bot/headers/irc_send.h
  • New NZM netapi bot/headers/loaddlls.h
  • New NZM netapi bot/headers/md5.h
  • New NZM netapi bot/headers/misc.h
  • New NZM netapi bot/headers/ms04_007_asn1.h
  • New NZM netapi bot/headers/netapi.h
  • New NZM netapi bot/headers/netutils.h
  • New NZM netapi bot/headers/nzm.h
  • New NZM netapi bot/headers/patcher.h
  • New NZM netapi bot/headers/processes.h
  • New NZM netapi bot/headers/random.h
  • New NZM netapi bot/headers/rfb.h
  • New NZM netapi bot/headers/rndnick.h
  • New NZM netapi bot/headers/shellcode.h
  • New NZM netapi bot/headers/sysinfo.h
  • New NZM netapi bot/headers/tftpd.h
  • New NZM netapi bot/headers/threads.h
  • New NZM netapi bot/headers/version.h
  • New NZM netapi bot/headers/vncps.h
  • New NZM netapi bot/headers/wildcard.h
  • New NZM netapi bot/nzm.dsp
  • New NZM netapi bot/nzm.dsw
  • New NZM netapi bot/nzm.exe
    .exe windows x86

    Password: infected

    ad801d0cb3ba8c4b23850dacb23134e6


    Headers

    Imports

    Sections

  • New NZM netapi bot/nzm.ncb
  • New NZM netapi bot/nzm.opt
  • New NZM netapi bot/nzm.plg
    .html
  • New NZM netapi bot/nzmDmod_lite.txt