stealc | 568840x00000000004000000x[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

568840x00000000004000000x.dmp
Size

2.2MB
MD5

e2f64bfb8bf8b48f17876d483648e3ca
SHA1

984d87f4f999b5a8f477e3ae421088a506d7a845
SHA256

f7ca7918788ba151a9240cb26262fced28706c926ac8050c1df773433bb7b80d
SHA512

60c78b5787a9be5e0baa366a0b6dcdde175890fb632c1f28f15ad5c53dbd0090a9432b8d0580c459a67a2664ea678588654596461b44f0b38bee0b57b09dc89d
SSDEEP

12288:086BuD3/yZ/vfU56TfXDL97zjad7OM4bZ:0

Score

10^/10

stealer stealc

Malware Config

Signatures

Detects Stealc stealer 1 IoCs

resource	yara_rule
sample	family_stealc

Stealc family
stealc

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
568840x00000000004000000x.dmp

Files

568840x00000000004000000x.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ