Static task
static1
Behavioral task
behavioral1
Sample
7aa1e9820720b8b96739d5700dc22b3d.exe
Resource
win7-20231215-en
General
-
Target
7aa1e9820720b8b96739d5700dc22b3d
-
Size
124KB
-
MD5
7aa1e9820720b8b96739d5700dc22b3d
-
SHA1
9230d18d90a5138056a78f6cc2726abc36366665
-
SHA256
95e6363ff5cf8d77d2eff55d89ddae5c04e8976f1ecaa5fe34c4b4792ca336da
-
SHA512
7630d6d13a20a061d8dfdd89f9b762dd63f557a7993550301db1b2915b4e0072de69bd88397eb2ba1ca35403ff0b83eed4a04699a31320c6068a7139eb5de790
-
SSDEEP
1536:e/fyqCMzmEkk9f7g0c85+wdn7j7OtanjICS4AMsZAILaiLaeyfRQGG:eiqCMF/L35+wdnH77noO4A7leQGGG
Malware Config
Signatures
-
Nirsoft 1 IoCs
resource yara_rule sample Nirsoft -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7aa1e9820720b8b96739d5700dc22b3d
Files
-
7aa1e9820720b8b96739d5700dc22b3d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ