General
-
Target
nzmlite_symantec___.rar
-
Size
215KB
-
MD5
96045f06b6fe0b10ab8876a0ee120402
-
SHA1
b86f4898d5e4473a53bd7c0fe15765f84edadfb7
-
SHA256
777cafee177f75b90b2fcb4afd03f07239644ba149276c676e2b28f40b377aa2
-
SHA512
a34b0444e3635b9f6191016acd485ef836c210ab0aef5b23042fd5d35d2e0395530aeba3104283f4140c204d0ab1ac4cf7e7159a35aad32b220fbf0ab65e6fac
-
SSDEEP
6144:hjAkN0130mpLuIxzT+DUGKoaMdzXCtMCKMpe:uc0TpiIxzT+DdaiQe
Score
3/10
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
nzmlite_symantec___.rar
Password: infected
-
nzmlite/MD5ChecksumTest.exe
Password: infected
45d8cb55bcfec04939099fc1affdfcce
Headers
Imports
Sections
-
nzmlite/config/cfg.h
-
nzmlite/cpp/core/aliaslog.cpp
-
nzmlite/cpp/core/autostart.cpp
-
nzmlite/cpp/core/download.cpp
-
nzmlite/cpp/core/ehandler.cpp
-
nzmlite/cpp/core/fphost.cpp
-
nzmlite/cpp/core/irc_send.cpp
-
nzmlite/cpp/core/loaddlls.cpp
-
nzmlite/cpp/core/misc.cpp
-
nzmlite/cpp/core/netutils.cpp
-
nzmlite/cpp/core/nzm.cpp
-
nzmlite/cpp/core/processes.cpp
-
nzmlite/cpp/core/random.cpp
-
nzmlite/cpp/core/rndnick.cpp
-
nzmlite/cpp/core/shellcode.cpp
-
nzmlite/cpp/core/sysinfo.cpp
-
nzmlite/cpp/core/threads.cpp
-
nzmlite/cpp/core/wildcard.cpp
-
nzmlite/cpp/exploits/advscan.cpp
-
nzmlite/cpp/exploits/dcom.cpp
-
nzmlite/cpp/exploits/ftpd.cpp
-
nzmlite/cpp/exploits/ms04_007_asn1.cpp
-
nzmlite/cpp/exploits/netapi.cpp
-
nzmlite/cpp/exploits/sym06_010.cpp
-
nzmlite/cpp/exploits/tftpd.cpp
-
nzmlite/cpp/md5.cpp
-
nzmlite/cpp/patcher.cpp
-
nzmlite/cpp/version.c
-
nzmlite/cpp/vncps.cpp
-
nzmlite/exe/nzm.exe
Password: infected
f64bc6af82dbb7b2d54a1c822932976f
Headers
Imports
Sections
-
nzmlite/headers/advscan.h
-
nzmlite/headers/aliaslog.h
-
nzmlite/headers/autostart.h
-
nzmlite/headers/dcom.h
-
nzmlite/headers/defines.h
-
nzmlite/headers/download.h
-
nzmlite/headers/ehandler.h
-
nzmlite/headers/externs.h
-
nzmlite/headers/fphost.h
-
nzmlite/headers/ftpd.h
-
nzmlite/headers/ftppot.h
-
nzmlite/headers/functions.h
-
nzmlite/headers/globals.h
-
nzmlite/headers/includes.h
-
nzmlite/headers/irc_send.h
-
nzmlite/headers/loaddlls.h
-
nzmlite/headers/md5.h
-
nzmlite/headers/misc.h
-
nzmlite/headers/ms04_007_asn1.h
-
nzmlite/headers/netapi.h
-
nzmlite/headers/netutils.h
-
nzmlite/headers/nzm.h
-
nzmlite/headers/patcher.h
-
nzmlite/headers/processes.h
-
nzmlite/headers/random.h
-
nzmlite/headers/rfb.h
-
nzmlite/headers/rndnick.h
-
nzmlite/headers/shellcode.h
-
nzmlite/headers/sym06_010.h
-
nzmlite/headers/sysinfo.h
-
nzmlite/headers/tftpd.h
-
nzmlite/headers/threads.h
-
nzmlite/headers/version.h
-
nzmlite/headers/vncps.h
-
nzmlite/headers/wildcard.h
-
nzmlite/nzm.dsp
-
nzmlite/nzm.dsw
-
nzmlite/nzm.ncb
-
nzmlite/nzm.opt
-
nzmlite/nzm.plg
-
nzmlite/nzmDmod_lite.txt