predatorstealer | 2728-20-0x0000000000400000-0x0000000000490000-memory[.]dmp | Triage

Sharing

General

Target

2728-20-0x0000000000400000-0x0000000000490000-memory.dmp
Size

576KB
MD5

7f62390454e78f8064355cf4a1fb9d40
SHA1

5094392204a1394646b850d5face22360f44e98a
SHA256

adbf12c7e9c8ff2d70c8c98bb891684a3e5c127689c088e3476305365f7dce57
SHA512

436f97680c96e97ffea68c2b28577afe1aac906f9155b310c3cca328d052d987d74d5f16cad9c3d00b219a8209d8d2149c03cb9aac2a3a434b9cc1ee5eb8d3c2
SSDEEP

6144:s+BWmtpZQYS2PjCLfjSCpkALDUbr0tJ0nzbWYhJ6usHJdJU:XPw2PjCLe3a6Q70zbpJOHi

Score

10^/10

predatorstealer

Malware Config

Signatures

Predatorstealer family
predatorstealer

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2728-20-0x0000000000400000-0x0000000000490000-memory.dmp

Files

2728-20-0x0000000000400000-0x0000000000490000-memory.dmp
.exe windows:4 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 533KB - Virtual size: 533KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ