Static task
static1
Behavioral task
behavioral1
Sample
d0a84b38a996132825f1ab1a7c918631d3aa1a2e91c29e413616cc0fdb774930.exe
Resource
win7-20221111-en
General
-
Target
d0a84b38a996132825f1ab1a7c918631d3aa1a2e91c29e413616cc0fdb774930
-
Size
679KB
-
MD5
f47eddc3935ac4a7e12f5448f03a3fa5
-
SHA1
c786643dc67d0c5cad0843c4f5d2581919891ca0
-
SHA256
d0a84b38a996132825f1ab1a7c918631d3aa1a2e91c29e413616cc0fdb774930
-
SHA512
5ef561d8369c37c69bfe0cce9c596764e64b980576d33a7ac4e2ac3d5df60914e4e5084503f0a016ffcf2eb72fcf0696553edbb7d489e4281bcab231c1ca2707
-
SSDEEP
12288:o1P8JUFCBlF32PyN724Ck6TpxGbj8lleYIagaB:o1kJUFCBl52Pe724XSlzIagaB
Malware Config
Signatures
-
Nirsoft 1 IoCs
resource yara_rule sample Nirsoft -
NirSoft MailPassView 1 IoCs
Password recovery tool for various email clients
resource yara_rule sample MailPassView -
NirSoft WebBrowserPassView 1 IoCs
Password recovery tool for various web browsers
resource yara_rule sample WebBrowserPassView
Files
-
d0a84b38a996132825f1ab1a7c918631d3aa1a2e91c29e413616cc0fdb774930.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 674KB - Virtual size: 673KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 116B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ