Behavioral task
behavioral1
Sample
c7fad60729d13b4d7635a4a03c05e8ba348db293accf8605454a703ea64543d5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c7fad60729d13b4d7635a4a03c05e8ba348db293accf8605454a703ea64543d5.exe
Resource
win10v2004-20220812-en
General
-
Target
c7fad60729d13b4d7635a4a03c05e8ba348db293accf8605454a703ea64543d5
-
Size
416KB
-
MD5
91d937710ac52d2fa0627f84ce7487fe
-
SHA1
65be2041f7bc9463fb9d58f79b7fc053131993e1
-
SHA256
c7fad60729d13b4d7635a4a03c05e8ba348db293accf8605454a703ea64543d5
-
SHA512
22c1c7a29f14f7aac74b11a68377e78aced2881fa7bd0f0b20146c7189a0773234bbd2b7f9cabbe26e902be180b5a2d82a825e01c2805c185a84b507aad84e55
-
SSDEEP
6144:mtPQbyqd55JA4mCpAYFTU2Leeo50VTlOLyk5CL//X6sdM7CzhF1pBocNHIf7CKjN:7L55qCp7U/ORil52fu0F1jrNs7CNuy
Malware Config
Signatures
-
ISR Stealer payload 1 IoCs
resource yara_rule sample family_isrstealer -
Isrstealer family
Files
-
c7fad60729d13b4d7635a4a03c05e8ba348db293accf8605454a703ea64543d5.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 372KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ