isrstealer | 1603bf16a86935417f4a52c5fee3f5bd30fefcbaed1c7483ebd32c80f7fef8af | Triage

Sharing

General

Target

1603bf16a86935417f4a52c5fee3f5bd30fefcbaed1c7483ebd32c80f7fef8af
Size

592KB
MD5

0016b20e46142e2b1b314f7a5459da56
SHA1

b42c13859d16033610266d955dc041ccc745b0fc
SHA256

1603bf16a86935417f4a52c5fee3f5bd30fefcbaed1c7483ebd32c80f7fef8af
SHA512

66776fb74aea1174ee7f2fc446d6b7fcffc18cb580d10527832011217343f51f7cd19d1039b0b39d34fa18fc3e5addbfe22706fc94a85867b78bf31011aa7822
SSDEEP

12288:6F7dFeCXuLKcCVsz6SDLXo67gwv3/jA0:gPeCXuLKdsO4L4gs

Score

10^/10

isrstealer

Malware Config

Signatures

ISR Stealer payload 1 IoCs

resource	yara_rule
sample	family_isrstealer

Isrstealer family
isrstealer

Files

1603bf16a86935417f4a52c5fee3f5bd30fefcbaed1c7483ebd32c80f7fef8af
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 576KB - Virtual size: 575KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ