Static task
static1
Behavioral task
behavioral1
Sample
bb27d66674e86e23a877a665172573fdf1c1dd782a04de368ed5aabf55e8db67.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bb27d66674e86e23a877a665172573fdf1c1dd782a04de368ed5aabf55e8db67.exe
Resource
win10v2004-20220812-en
General
-
Target
bb27d66674e86e23a877a665172573fdf1c1dd782a04de368ed5aabf55e8db67
-
Size
1.8MB
-
MD5
8b02ce32546a1c624064988d9c8dba78
-
SHA1
cd7cb645370743c493f6d0d26dc2867ec461bf94
-
SHA256
bb27d66674e86e23a877a665172573fdf1c1dd782a04de368ed5aabf55e8db67
-
SHA512
11f5acd1e7e01c632ff39060cc0810a0ca57bb13c4c6fc08340022b3c92bdd76c906d83efbd0f1074a33d079542a1d505d8fad15195710c833f0f32aaec4dd33
-
SSDEEP
24576:hqXOOOOOOOOOOOOOOOOOOOOOOOOyffihmIq1yjZGo+5QzCJoEoF5Xs3iAiZs:hqMIqk1GroDN
Malware Config
Signatures
-
Nirsoft 1 IoCs
resource yara_rule sample Nirsoft -
NirSoft WebBrowserPassView 1 IoCs
Password recovery tool for various web browsers
resource yara_rule sample WebBrowserPassView
Files
-
bb27d66674e86e23a877a665172573fdf1c1dd782a04de368ed5aabf55e8db67.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ