Static task
static1
Behavioral task
behavioral1
Sample
8be8ef8d67268e081f0a0c5877560dffb4d2a76c0a4e3ac818552057cc762f40.exe
Resource
win7-20220901-en
General
-
Target
8be8ef8d67268e081f0a0c5877560dffb4d2a76c0a4e3ac818552057cc762f40
-
Size
679KB
-
MD5
41a7c58d303ef9e6634368ad73d355d3
-
SHA1
91c07b28595b032fb0a11e2a55b138efb9e347be
-
SHA256
8be8ef8d67268e081f0a0c5877560dffb4d2a76c0a4e3ac818552057cc762f40
-
SHA512
5bfda5e7890e2a8dc0395c1369a6c9b15c0b2eaf438215c53424685964cbcb7716fb1a4d32d8cb8ffd38ab86f16698113b7f8c9ee3c5f93abe8f1c6ac278cee2
-
SSDEEP
12288:o1P8JUFCBlF32PyN724Ck6TpxGbj8lleYIaga8:o1kJUFCBl52Pe724XSlzIaga8
Malware Config
Signatures
-
Nirsoft 1 IoCs
resource yara_rule sample Nirsoft -
NirSoft MailPassView 1 IoCs
Password recovery tool for various email clients
resource yara_rule sample MailPassView -
NirSoft WebBrowserPassView 1 IoCs
Password recovery tool for various web browsers
resource yara_rule sample WebBrowserPassView
Files
-
8be8ef8d67268e081f0a0c5877560dffb4d2a76c0a4e3ac818552057cc762f40.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 674KB - Virtual size: 673KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 116B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ