stealc | aa229d07a3a3901ade9714effda5f904[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa229d07a3a3901ade9714effda5f904.bin
Size

2.2MB
MD5

aa229d07a3a3901ade9714effda5f904
SHA1

99ab9a369ee13acf327f12e5af0c864b67d540b6
SHA256

86c68a5a74c982d70a5f5215845355f783b2304ec78df2b773c1128481f1a6ef
SHA512

cae0429ffc6879cb638ba7325bd1c80b5881cc35cf94203d2de4f20176d29214a5147f51d36907f8e9b8466d5bea873a4ba5c7aaac47be5fd3d5f58ccab2d115
SSDEEP

3072:RyMxBwQ5jXl9t6Swu6bCYf5z46CyOVfFLxghBaI:oMxSQ9jtpf4DHO/LxghE

Score

10^/10

stealc

Malware Config

Signatures

Stealc family
stealc

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa229d07a3a3901ade9714effda5f904.bin

Files

aa229d07a3a3901ade9714effda5f904.bin
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ