SniffPass[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

SniffPass.exe
Size

67KB
MD5

001deb2e5567ce7b887bbb83323d8857
SHA1

3bd9fd175a098192a48d6257fded4fc5064fd5c2
SHA256

1e13fd79ad54fe98e08d9ffca2c287a470c50c2876608edce2fe38e07c245266
SHA512

275340828affc58a528a01a77f5b7b95b33c1436dfdb70295aa4e7c32a3301d4d8cb08599469f8bc7ba4adb44809fc25be5de40242c0a00681a92b062db9b44a
SSDEEP

1536:5EdcXGmC/sGdNcgLqefL73zfsxPNiYKbs71d:5EdYCJdSCqenDfWNCI71d

Score

10^/10

Malware Config

Signatures

Nirsoft 1 IoCs

resource	yara_rule
sample	Nirsoft

Files

SniffPass.exe
.exe windows x86

ad6726d15faee2a539b2822732b3874f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAIoctl
setsockopt
WSAGetLastError
htons
recv
bind
socket
WSASetLastError
closesocket
WSAAsyncSelect
connect
WSAStartup
WSACleanup
inet_addr
inet_ntoa

msvcrt

_strcmpi
_memicmp
memset
_ultoa
strcpy
strlen
strcmp
_stricmp
strncat
strrchr
strcat
strtoul
memcmp
modf
free
malloc
_strnicmp
strchr
??2@YAPAXI@Z
??3@YAXPAX@Z
memcpy
sprintf
_itoa
_strlwr
_purecall
__dllonexit
_onexit
_c_exit
_exit
_XcptFilter
_cexit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3

comctl32

CreateToolbarEx
ImageList_SetImageCount
ImageList_Create
ImageList_AddMasked
ord17
ImageList_ReplaceIcon
ord6

kernel32

OpenProcess
GlobalFree
ReadProcessMemory
GetCurrentProcess
ExitProcess
GetCurrentProcessId
GetPrivateProfileIntA
EnumResourceNamesA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetTempPathA
GetTimeFormatA
GetFileAttributesA
CloseHandle
GetTempFileNameA
GlobalLock
GetVersionExA
GetLastError
GlobalAlloc
GlobalUnlock
LoadLibraryExA
MultiByteToWideChar
GetStartupInfoA
DeleteFileA
WriteFile
GetModuleHandleA
GetTickCount
WideCharToMultiByte
SystemTimeToFileTime
CompareFileTime
GetLocalTime
FileTimeToSystemTime
GetProcAddress
LoadLibraryA
FreeLibrary
WinExec
LocalFree
CreateFileA
GetFileSize
ReadFile
FormatMessageA
GetWindowsDirectoryA
GetModuleFileNameA
GetDateFormatA

user32

RegisterWindowMessageA
OpenClipboard
BeginDeferWindowPos
IsDialogMessageA
TranslateMessage
SetTimer
EndDeferWindowPos
PostQuitMessage
TrackPopupMenu
KillTimer
GetFocus
DispatchMessageA
DeferWindowPos
GetMenuItemInfoA
EnumChildWindows
DestroyMenu
GetDlgCtrlID
DestroyWindow
DialogBoxParamA
ModifyMenuA
CreateDialogParamA
LoadStringA
PeekMessageA
SendMessageTimeoutA
GetSysColorBrush
SetCursor
ShowWindow
LoadCursorA
ChildWindowFromPoint
SetWindowTextA
EndDialog
GetDlgItem
CreateWindowExA
SetDlgItemInt
SendDlgItemMessageA
GetDlgItemInt
SetDlgItemTextA
DefWindowProcA
TranslateAcceleratorA
MessageBoxA
GetWindowPlacement
SendMessageA
GetWindowRect
RegisterClassA
UpdateWindow
GetSystemMetrics
PostMessageA
SetMenu
LoadAcceleratorsA
SetWindowPos
LoadImageA
MessageBeep
LoadIconA
GetWindowLongA
SetWindowLongA
SetFocus
InvalidateRect
GetMenuStringA
CheckMenuItem
GetSubMenu
GetCursorPos
GetMenu
GetSysColor
SetClipboardData
GetDC
EnableWindow
MapWindowPoints
EmptyClipboard
EnableMenuItem
ReleaseDC
GetParent
GetClientRect
GetClassNameA
CloseClipboard
GetMenuItemCount
MoveWindow
GetWindowTextA
LoadMenuA
GetMessageA

gdi32

GetTextExtentPoint32A
SetBkColor
GetStockObject
GetDeviceCaps
SetBkMode
DeleteObject
SetTextColor
CreateFontIndirectA

comdlg32

FindTextA
GetOpenFileNameA
GetSaveFileNameA

advapi32

RegDeleteKeyA
RegCloseKey
RegOpenKeyExA
RegEnumKeyExA
RegQueryValueExA

shell32

ShellExecuteA

ole32

CoUninitialize
CoInitialize
CoCreateInstance

oleaut32

SysFreeString
SysAllocString

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ad6726d15faee2a539b2822732b3874f

Headers

File Characteristics

Imports

ws2_32

msvcrt

comctl32

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 512B - Virtual size: 59KB

.rsrc Size: 12KB - Virtual size: 11KB

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 512B - Virtual size: 59KB

.rsrc
Size: 12KB - Virtual size: 11KB