89b68d190315e6476b0a8b135e6e515ab931c10a

Sharing

Copy URL Twitter E-mail

General

Target
89b68d190315e6476b0a8b135e6e515ab931c10a
Size 459KB
Sample230102-p9yt9aec36
SHA256 72c3a786661ee9742cf1d0e3b99b89e976911ed87971695f08487cf42d7fc29d
MD5 1edba8a76c4a327f6e0b81e85c14ede6
SHA1 89b68d190315e6476b0a8b135e6e515ab931c10a
SHA512 3347452e348f52a17a787574136d8d0fccc70511205e47bd2fdc546718b87d22f9280621bc5a849c6b5834e1226a453ccc1657ff34f63877f052713ca9710562
SSDEEP 12288:/38LUKZp2WDqHIbwMUUjLZUJtUp23vqmkgB:/OTp2CqHczjlUJtUp23vtB
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Signatures

Nirsoft 1 IoCs

resource	yara_rule
sample	Nirsoft

NirSoft WebBrowserPassView 1 IoCs

Password recovery tool for various web browsers

resource	yara_rule
sample	WebBrowserPassView

File Explorer

89b68d190315e6476b0a8b135e6e515ab931c10a

.exe 459KB

89b68d190315e6476b0a8b135e6e515ab931c10a

IMPHASH 53d7a472d17725cd3f06b8ab4297b1ea
SHA256 72c3a786661ee9742cf1d0e3b99b89e976911ed87971695f08487cf42d7fc29d
MD5 1edba8a76c4a327f6e0b81e85c14ede6
SHA1 89b68d190315e6476b0a8b135e6e515ab931c10a
SHA512 3347452e348f52a17a787574136d8d0fccc70511205e47bd2fdc546718b87d22f9280621bc5a849c6b5834e1226a453ccc1657ff34f63877f052713ca9710562
SSDEEP 12288:/38LUKZp2WDqHIbwMUUjLZUJtUp23vqmkgB:/OTp2CqHczjlUJtUp23vtB
MD5 SHA1 SHA512 SSDEEP

windows x86

Nirsoft
NirSoft WebBrowserPassView

Password recovery tool for various web browsers

Minor OS version

Major OS version

Entry point

6806

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

comctl32

ImageList_Add CreateStatusWindowW ImageList_SetImageCount ImageList_AddMasked ImageList_Create ord17 ImageList_ReplaceIcon CreateToolbarEx

wininet

FindNextUrlCacheEntryW FindCloseUrlCache FindFirstUrlCacheEntryW

kernel32

ReadFile GetModuleFileNameW lstrlenW FindResourceW GlobalUnlock LoadResource GetTempPathW SystemTimeToTzSpecificLocalTime GlobalAlloc LoadLibraryExW GetSystemDirectoryW FindNextFileW GetFileTime SizeofResource FindClose FormatMessageW GlobalLock GetWindowsDirectoryW GetVersionExW GetDateFormatW DuplicateHandle GetCurrentProcessId OpenProcess MapViewOfFile CreateFileMappingW UnmapViewOfFile GetCurrentProcess GetPrivateProfileStringW WritePrivateProfileStringW SetFilePointer EnumResourceNamesW GetStdHandle ExitProcess ReadProcessMemory GetSystemTimeAsFileTime Process32NextW CreateToolhelp32Snapshot Process32FirstW EnumResourceTypesW GetFullPathNameW InitializeCriticalSection GetFullPathNameA CreateFileA GetDiskFreeSpaceA Sleep GetSystemInfo LeaveCriticalSection SetEndOfFile GetFileAttributesA QueryPerformanceCounter GetFileAttributesExW DeleteCriticalSection InterlockedCompareExchange FlushFileBuffers UnlockFile LockFile UnlockFileEx GetTempPathA FormatMessageA LockFileEx GetSystemTime EnterCriticalSection AreFileApisANSI GetDiskFreeSpaceW DeleteFileA LockResource GetModuleHandleA GetStartupInfoW GetFileAttributesW FindFirstFileW lstrcpyW GetTimeFormatW GetTempFileNameW SetFilePointerEx GetTickCount GetModuleHandleW FileTimeToSystemTime LoadLibraryW GetProcAddress GetLastError FreeLibrary CompareFileTime WideCharToMultiByte WriteFile GetFileSize MultiByteToWideChar CreateFileW CopyFileW LocalFree DeleteFileW FileTimeToLocalFileTime CloseHandle SetErrorMode SystemTimeToFileTime GetPrivateProfileIntW

user32

BeginDeferWindowPos EndDeferWindowPos KillTimer GetMenuItemCount CheckMenuRadioItem CheckMenuItem GetCursorPos SetClipboardData GetSubMenu GetMenu EnableWindow MapWindowPoints EmptyClipboard EnableMenuItem GetClassNameW GetMenuStringW OpenClipboard CloseClipboard MoveWindow DialogBoxParamW CreateDialogParamW EnumChildWindows LoadStringW DestroyWindow GetDesktopWindow GetWindowTextW LoadMenuW ModifyMenuW GetMenuItemInfoW GetDlgCtrlID DestroyMenu RegisterWindowMessageW TrackPopupMenu PostQuitMessage IsDialogMessageW DrawTextExW GetMessageW DispatchMessageW TranslateMessage GetKeyState MonitorFromWindow GetMonitorInfoW GetParent SetFocus GetWindowLongW GetSysColor LoadIconW LoadImageW SetMenu SetWindowPlacement TranslateAcceleratorW MessageBoxW RegisterClassW PostMessageW SendMessageW DefWindowProcW LoadAcceleratorsW CreateWindowExW DeferWindowPos GetSystemMetrics GetClientRect BeginPaint GetDlgItemTextW SetDlgItemTextW SetDlgItemInt UpdateWindow GetWindowPlacement SetWindowTextW DrawFrameControl InvalidateRect GetWindow EndPaint GetDlgItem SetWindowLongW EndDialog SendDlgItemMessageW GetDlgItemInt GetWindowRect ChildWindowFromPoint LoadCursorW SetCursor ShowWindow ReleaseDC GetSysColorBrush GetDC SetWindowPos SetTimer

gdi32

GetObjectW GetPixel SetPixel SelectObject CreateCompatibleDC GetTextExtentPoint32W GetStockObject SetBkColor CreateCompatibleBitmap SetStretchBltMode CreateFontIndirectW StretchBlt DeleteDC GetDeviceCaps SetBkMode DeleteObject SetTextColor

comdlg32

GetSaveFileNameW FindTextW GetOpenFileNameW

advapi32

RegSetValueExW RegCloseKey RegEnumValueW RegDeleteValueW RegQueryValueExW RegOpenKeyExW

shell32

ShellExecuteW SHGetMalloc SHGetFileInfoW SHBrowseForFolderW SHGetPathFromIDListW

ole32

CoTaskMemFree CoUninitialize CoInitialize CoCreateGuid

msvcrt

memset memcpy _except_handler3 _controlfp wcsrchr _snwprintf wcsncat _wtoi wcschr _wcsicmp _purecall ??2@YAPAXI@Z ??3@YAXPAX@Z _wcsnicmp _wtoi64 _memicmp wcstoul modf free malloc memmove wcsncmp _wcsupr _strlwr strchr _wcslwr _itow _gmtime64 realloc strftime memchr __dllonexit _onexit _c_exit _exit _XcptFilter _cexit exit _wcmdln __wgetmainargs _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type _CIlog