Stealer[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Stealer.exe
Size

5.3MB
MD5

88656fe8be2dc81a934101e66e75f8ba
SHA1

b4b663629994870f6681fc6c4e4537bdd37673a8
SHA256

142887346bbed14b47e4a76810954fda601e2fed6965d7569b8ded30d8afcc88
SHA512

eaf3ceb053ced3712f3738a711013b4866bbb9d28abadf21c5823dfdbbd98915ced1c9457b839e96aed2d126528701e5ef2b295234fe8d4c65e03a7c8b944b3c
SSDEEP

98304:HTE3ZTzBnuJi4Pu6e+p7EYJPo+eBaOSECU8LvBC6LpjWMs7l:HTmTzWi0ltEYuaOSFZXLpj

Score

1^/10

Malware Config

Signatures

Files

Stealer.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 194KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ