a0d5a5f89d62230b26c57bade0df0ab721110925a6440f306043b5410b18c3ed | Triage

Sharing

General

Target

a0d5a5f89d62230b26c57bade0df0ab721110925a6440f306043b5410b18c3ed
Size

230KB
MD5

2c2fa72b1cfcc4e452920f9ab0994177
SHA1

003ada28dfba1ebe2396acf5f0c29a80c9fad266
SHA256

a0d5a5f89d62230b26c57bade0df0ab721110925a6440f306043b5410b18c3ed
SHA512

62009ea9c3f49bfda731d657f525049e04ba61ae13a785177bbcb96f8f48f1a60ed07003b8957410d2a81cbfde7d6d78024567d7a42d42ca0f41ef380809b302
SSDEEP

6144:adT3RRJxSu6ZGGexdkXyeKY6o2aTYRCzEacG:qhRv9xdkXyeKtWT76G

Score

10^/10

Malware Config

Signatures

Nirsoft 1 IoCs

Processes:

resource yara_rule

sample Nirsoft

Files

a0d5a5f89d62230b26c57bade0df0ab721110925a6440f306043b5410b18c3ed
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ