Static task
static1
Behavioral task
behavioral1
Sample
41821ca5eba30dfbb508b0cc17e9dde1d1aae5728d03d9f5042cd9adf0886955.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
41821ca5eba30dfbb508b0cc17e9dde1d1aae5728d03d9f5042cd9adf0886955.exe
Resource
win10v2004-20220812-en
General
-
Target
41821ca5eba30dfbb508b0cc17e9dde1d1aae5728d03d9f5042cd9adf0886955
-
Size
370KB
-
MD5
a8bb7f9e9e772575284f6cc0c56e3037
-
SHA1
ab153a32196a7dcefaf6d6c5348fb43df0392b3b
-
SHA256
41821ca5eba30dfbb508b0cc17e9dde1d1aae5728d03d9f5042cd9adf0886955
-
SHA512
ae211076fd027e1103d0a2668b9d694bd4782bc369f1229ec04bc706dc20b13a163fd37ca7c48c543162a68dfe7ba60d10b3a7700b6fe5474e71efb501902796
-
SSDEEP
6144:BNbS/QTjhUqBfxrwEnuNcSsm7IoYGW0VvBXCAt6kihN:bQtqB5urTIoYWBQk
Malware Config
Signatures
-
Nirsoft 1 IoCs
resource yara_rule sample Nirsoft -
NirSoft WebBrowserPassView 1 IoCs
Password recovery tool for various web browsers
resource yara_rule sample WebBrowserPassView
Files
-
41821ca5eba30dfbb508b0cc17e9dde1d1aae5728d03d9f5042cd9adf0886955.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 366KB - Virtual size: 365KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ