NYAN W0rm v0[.]3[.]8[.]7z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NYAN W0rm v0.3.8.7z
Size

1.3MB
MD5

3b9e1c91dea8d410beba23103ebc4a1c
SHA1

6d9ca163581abb27c99f5095f15846b8af0ecde0
SHA256

50daf0aabcdfcb451abd188de07a5aad16246a343adcfc0fdda6a075d137168a
SHA512

cbb963dd78e3b6c20af5b3c69364936afebb129e56faa9b6cf6c8b7ff1a909de6acf23125f6d20090b141cd180c5d043a85082423e5faecfbbaee7c972105e6a
SSDEEP

24576:zLVSoHEV85hzFOwUrKZ94y7BsdkEcWp7mW4KPHMSjUnwrk2wn5o:zLVSBCFnZ94wBsCEvD4KfHUwrky

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/NYAN W0rm v0.3.8.exe

Files

NYAN W0rm v0.3.8.7z
.7z

Password: infected
NYAN W0rm v0.3.8.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ