Static task
static1
Behavioral task
behavioral1
Sample
HEUR-Trojan-PSW.MSIL.Stelega.gen-c82ecb3d5e3987a98b7ad91beaa7380066929f5e357851fd2120f69b8a9ac278.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
HEUR-Trojan-PSW.MSIL.Stelega.gen-c82ecb3d5e3987a98b7ad91beaa7380066929f5e357851fd2120f69b8a9ac278.exe
Resource
win10v2004-20220901-en
General
-
Target
HEUR-Trojan-PSW.MSIL.Stelega.gen-c82ecb3d5e3987a98b7ad91beaa7380066929f5e357851fd2120f69b8a9ac278.exe
-
Size
11KB
-
MD5
ebe90fe011e6ad938541f047e2adfe03
-
SHA1
53d2f460c584dda19b5b5593f73d83eef6992005
-
SHA256
c82ecb3d5e3987a98b7ad91beaa7380066929f5e357851fd2120f69b8a9ac278
-
SHA512
05ea2389e9d88f4b470ceb5f7f7e4c9b21c917f40f467e95fb6ab337452dab24a16d1824427d49e16188eebd98447fe9fdda124ba92d3d8bd2f045e60c40487a
-
SSDEEP
192:LYGZ+jpP1VeJexq0CtVfoHLa3B4hbZM5b3UFqzTyypr3K7ujWU:8GS+exupoHLe4hbZM+F+yE7K79
Malware Config
Signatures
Files
-
HEUR-Trojan-PSW.MSIL.Stelega.gen-c82ecb3d5e3987a98b7ad91beaa7380066929f5e357851fd2120f69b8a9ac278.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ