4ab0e3ef41dd65ab1f0ac21a50d6c69d385df4608a483fef01bc7d7aedfaf1b8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ab0e3ef41dd65ab1f0ac21a50d6c69d385df4608a483fef01bc7d7aedfaf1b8
Size

106KB
MD5

67b90ff041d30761b3af393757f55e30
SHA1

f5ca8563e84bacb981f9663b8b9d6658bdccca1f
SHA256

4ab0e3ef41dd65ab1f0ac21a50d6c69d385df4608a483fef01bc7d7aedfaf1b8
SHA512

5e0cf91e231e45bebef69c686f61eefa10d6e9e7e9a8ae7951150f04131082d6ee46ee2b46523381795f79690fb23d279dc7dc278453cf1260f995f90515de5f
SSDEEP

1536:6DDdMaV/8YyujPCM0Qv3hbw557Qf4iTGuYExC91Wg059Q97cq1umJd+Ph:6Fv/0u+Mnhk557QgigEQWzg97cfm8

Score

10^/10

Malware Config

Signatures

Nirsoft 1 IoCs

resource	yara_rule
sample	Nirsoft

Files

4ab0e3ef41dd65ab1f0ac21a50d6c69d385df4608a483fef01bc7d7aedfaf1b8
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rmnet
Size: 54KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE