stealc | 5c8c01c5952b69b6952973d6add9c461[.]bin | Triage

Sharing

General

Target

5c8c01c5952b69b6952973d6add9c461.bin
Size

3.7MB
MD5

5c8c01c5952b69b6952973d6add9c461
SHA1

7984880ee73f6b131cf8ffc6aacbbb795fbf2bb8
SHA256

1e35fb886e2dece9ca906c0c6683a1720ae8057585dad7d8ed8800c65b2f6325
SHA512

fe4152368d3723dc9a0bb228b69d32cdff24fc8a4cfdf05c6fe13d5ec084b0c2f2c5b9e9ad578e3463a85f4a75e3977b13b7c3aa16b2b087375be5ecd55a58c4
SSDEEP

24576:IDVjf1SK0QuhEhfvHhO7fN9zFj5XDERLldbMfn/5LSARfcOMb+JGPSkHZRyYc6IK:IxjfP

Score

10^/10

stealc

Malware Config

Signatures

Stealc family
stealc

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c8c01c5952b69b6952973d6add9c461.bin

Files

5c8c01c5952b69b6952973d6add9c461.bin
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ