stealerium | 1476-63-0x0000000000400000-0x0000000000592000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1476-63-0x0000000000400000-0x0000000000592000-memory.dmp
Size

1.6MB
MD5

6598f51a48fc6a4c8363594ecd840cb4
SHA1

c364fd7f64651c906bca68ab6cb8ad0b457dc4eb
SHA256

c449796a6c57b9f97a3877f1f4d3ae4bb0aec2eff580716bd76dfffbbdb7137f
SHA512

e0902ec63595a045e2ae0d6c268dfd6e49f957ba63ea791b63d9dbd52dba463cd34ca62a98856c6d5844fb7694052c60e0753dc3034857a52d4d275f2b1246b8
SSDEEP

24576:ClAi2Q9NXw2/wPOjdGxYqfw+Jwz/S/6RZs8nVW6k5JHkARt7DBAqnG:S/Tq24GjdGSgw+W7SCRnVQTEQ/BA8

Score

10^/10

stealerium

Malware Config

Signatures

Stealerium family
stealerium

Files

1476-63-0x0000000000400000-0x0000000000592000-memory.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ