2024-06-20_7f0bcc3a197beeec2b37076bcdbabc8d_hacktools_icedid_mimikatz
- SHA256 c5f8a10f1e4d872de52ee15e8d2746c451ca18fc8bf79b25777146cfd845c8a5
-
UPX dump on OEP (original entry point)
-
mimikatz is an open source tool to dump credentials on Windows
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
generic
count=5, id=12, version=7291,
count=9, id=11, version=8047,
count=6, id=10, version=8047,
count=44, id=14, version=7299,
count=44, id=19, version=8022,
count=2, id=93, version=2179,
count=687, id=1, productName=Unmarked objects,
count=29, id=19, version=8034,
count=205, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=96, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=100, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=27, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=84, productName=Unmarked objects (old),
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,