Behavioral task
behavioral1
Sample
1336-60-0x0000000000400000-0x000000000067A000-memory.exe
Resource
win7-20230220-en
General
-
Target
1336-60-0x0000000000400000-0x000000000067A000-memory.dmp
-
Size
2.5MB
-
MD5
ea83ff0b6aa00a1d911088a6ce1053b3
-
SHA1
1faad0539de9dc086683e1c0c492b3fb97449ae1
-
SHA256
7855aa71185278fc0a6770419541319c5ca0ffe249f809f8673470047ac42fb9
-
SHA512
1d22296af9ecf897a701f9c1dc6f151952f9fba319250ed18a0a8f3614f1d26b667b2b3acacd6f8beea421e3cb8e88432695b81e639c5a910c3d593ddefb4458
-
SSDEEP
24576:d1mW+x0JmPCoHOjzvmngn6aKk2er5mVJhY3Uz2dPURl7+PdfWPPfU:d
Malware Config
Extracted
stealc
http://publisherget.top/410b5129171f10ea.php
Signatures
Files
-
1336-60-0x0000000000400000-0x000000000067A000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ