f6ccc31828ac0641187f7be8c0ee659c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6ccc31828ac0641187f7be8c0ee659c
Size

54KB
MD5

f6ccc31828ac0641187f7be8c0ee659c
SHA1

f7d0e33f4c4e84a3ca3fb989b6e759c3c199ee87
SHA256

19e8d74bf36038f1f560adf1af897f8fe48b7500d5662d4cbf4ee59be73e0983
SHA512

4f2febbeacaf5cd55296d2fa2619bd533ea8ab51922f6b807a205fe09a98cbdc014d29fcc37fd72d5f319e427fc235fe9e419c272cb21c99ae75f66aba4aa858
SSDEEP

768:XwCCED27fBctlas7/bpf6oS1IkqueRYwAn4alby/uKiOUGe6abLkQGTdttT03:hD27fkL7/bpfnRywZaZCbqbw557g3

Score

10^/10

Malware Config

Signatures

Nirsoft 1 IoCs

resource	yara_rule
sample	Nirsoft

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6ccc31828ac0641187f7be8c0ee659c

Files

f6ccc31828ac0641187f7be8c0ee659c
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.x01
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE