6203d5c6acce44a8d18124c39df8e1d4a2edb011812782bcb21877985ac08cc9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6203d5c6acce44a8d18124c39df8e1d4a2edb011812782bcb21877985ac08cc9
Size

941KB
MD5

0fdeea17c9c38245bdc15e0e2b1b588f
SHA1

9b5753511ca574500d857e8982a8f50dd1a0b614
SHA256

6203d5c6acce44a8d18124c39df8e1d4a2edb011812782bcb21877985ac08cc9
SHA512

ef9054583abb43486f6149759cb3da715cf42490989e23fa1d27a548a9b5e4a910312b13fd918b596982181a7696b23181336e377843d941db2f2a139e82b36a
SSDEEP

24576:gOmQhScfAr73UtG1HCOmQN3UtG1H4ScfAr:gN1ii1

Score

10^/10

Malware Config

Signatures

Nirsoft 1 IoCs

resource	yara_rule
sample	Nirsoft

Files

6203d5c6acce44a8d18124c39df8e1d4a2edb011812782bcb21877985ac08cc9
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 938KB - Virtual size: 938KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ