c17eee6ae94b8405d258c2679c5eb3470628e11ceca3d1001e7b2ce75547116b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c17eee6ae94b8405d258c2679c5eb3470628e11ceca3d1001e7b2ce75547116b
Size

314KB
MD5

0ffbd14a5d6501bfe8d966b2d73a07b0
SHA1

19a4895674b77433ec1ddcc7c3ff63c0688b23f3
SHA256

c17eee6ae94b8405d258c2679c5eb3470628e11ceca3d1001e7b2ce75547116b
SHA512

a781905ca9c9af8403e2be840b024ed7b213f1a934334b6c3596f4c060964bc765b386d5644437ffac7038a14a429b67d1ab87165e65ed148bc5570c84cfea65
SSDEEP

6144:OYFf+nuzMBmrlpEz8KM78KtV2Nbg2cDveOp901PlbLMIX+:Oubrl+MIVg2cDvetu

Score

10^/10

Malware Config

Signatures

Nirsoft 1 IoCs

resource	yara_rule
sample	Nirsoft

Files

c17eee6ae94b8405d258c2679c5eb3470628e11ceca3d1001e7b2ce75547116b
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 209KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ