Static task
static1
Behavioral task
behavioral1
Sample
8eef68e38ffd16167815c1e257779bd65af3accec82cd840905241c197ddcc2c.exe
Resource
win7-20220812-en
General
-
Target
8eef68e38ffd16167815c1e257779bd65af3accec82cd840905241c197ddcc2c
-
Size
679KB
-
MD5
a72d5fc2211db435af9ab375f832b3cd
-
SHA1
7314bc8001f4aa904384a198e1df75660b3a5f63
-
SHA256
8eef68e38ffd16167815c1e257779bd65af3accec82cd840905241c197ddcc2c
-
SHA512
750ec66c04916748bdd99455d8507287b4da50949bc5677faadc2f72408a293a0f400a2bf97244693b7955e5afd7d915a5762733fe1432969943c41f3b393cb3
-
SSDEEP
12288:o1P8JUFCBlF32PyN724Ck6TpxGbj8lleYIagaO:o1kJUFCBl52Pe724XSlzIagaO
Malware Config
Signatures
-
Nirsoft 1 IoCs
resource yara_rule sample Nirsoft -
NirSoft MailPassView 1 IoCs
Password recovery tool for various email clients
resource yara_rule sample MailPassView -
NirSoft WebBrowserPassView 1 IoCs
Password recovery tool for various web browsers
resource yara_rule sample WebBrowserPassView
Files
-
8eef68e38ffd16167815c1e257779bd65af3accec82cd840905241c197ddcc2c.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 674KB - Virtual size: 673KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 116B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ