stealc | 1805218d229d2009365c32fa930a2811[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1805218d229d2009365c32fa930a2811.bin
Size

2.2MB
MD5

1805218d229d2009365c32fa930a2811
SHA1

265ed6446e291f7355e9f9419424d46213f23d4a
SHA256

7699b253d0a7b6a68c13da89385782d6a53a5af4b4dbc1d2b65f675f0a4d355a
SHA512

aae3ac4fb99899b64a9e563d607b3f3de91f82e685a76549b8c5766bb1dbc69bb5e9ee53887f5611addcbeb2fa75c96e6f1e34f33fdaa4636cb34387efee7a85
SSDEEP

3072:KwZx7tPwbpTK8Q5Uzf4JElJvIT4oZeBRq:bZ1xwbJKAzAElJA8TL

Score

10^/10

stealc

Malware Config

Signatures

Stealc family
stealc

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1805218d229d2009365c32fa930a2811.bin

Files

1805218d229d2009365c32fa930a2811.bin
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ