General

  • Target

    mailpv.exe

  • Size

    499KB

  • MD5

    fc3b93e042de5fa569a8379d46bce506

  • SHA1

    1ba499bafaa369be58e795a150403c8729ef5d95

  • SHA256

    5be325905df8aab7089ab2348d89343f55a2f88dadd75de8f382e8fa026451bd

  • SHA512

    1b802f8cddb1fcab643a2ec00ac139e7e419fc4f7fec5697c8b9f805c1a93ffbdc841438cfdd93c5018ce037fcc61844e392fb421423e88ec7d8dacecb0af08e

  • SSDEEP

    12288:hKEbpRc5EKKppUIkZLCchAaVSO6H0Miqpm/m4CynFOHmt9e:h3dRc94puFmaQH0Miqom41nFOHmq

Score
10/10

Malware Config

Signatures

  • Nirsoft 1 IoCs
  • NirSoft MailPassView 1 IoCs

    Password recovery tool for various email clients

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • mailpv.exe
    .exe windows x86

    4bb731cbb501f2408ea945577453f943


    Headers

    Imports

    Sections