Behavioral task
behavioral1
Sample
1752-82-0x0000000000400000-0x000000000067A000-memory.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1752-82-0x0000000000400000-0x000000000067A000-memory.exe
Resource
win10v2004-20230220-en
General
-
Target
1752-82-0x0000000000400000-0x000000000067A000-memory.dmp
-
Size
2.5MB
-
MD5
1bb41900817ee48843df3d4b9a68c2bc
-
SHA1
6d083d7485390211208d642592acc12b36fee908
-
SHA256
449d2583dddd71b07a14a2ce1c31b4e2123f28ed344855d2e835ed35067e3f2d
-
SHA512
122cc1d626cf7872ec005a3d919cc295c1f5765843ba9e0bba46fd615bf03799523a30f7ba195c964f0986de3dfe883cf2f7cb69c3de64fa324661218b97139c
-
SSDEEP
24576:dR/7+xhQ/SCoHOjzvmngn6JdDher5mVJhY3Uz2EOV4l7+PdAm8PfU:d
Malware Config
Extracted
stealc
http://publisherget.top/410b5129171f10ea.php
Signatures
Files
-
1752-82-0x0000000000400000-0x000000000067A000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ