stealc | NEAS[.]2b18aa2358054883dbe1d2e886b18e90[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2b18aa2358054883dbe1d2e886b18e90.exe
Size

2.7MB
MD5

2b18aa2358054883dbe1d2e886b18e90
SHA1

cada7c28ae3f1f18e3d3e60fe392de88e228b753
SHA256

361a4374f8aa0ff1111e6c10567b3e161257fd2b3cd5a274dd02376f9f693f72
SHA512

4ba7fa86397c6183016ae939a82427c5fc7e6a6a61c9204d0ed33aa20c464b16e822affd2873c8689fbb557e4b845e33a55f3215a3e515f5d6a2ad5af73f752b
SSDEEP

3072:CKE1EgSzlt96JMg97i4f5T4NltGZI0AVrA:pE1za92Mf44U2r

Score

10^/10

stealc

Malware Config

Signatures

Stealc family
stealc

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2b18aa2358054883dbe1d2e886b18e90.exe

Files

NEAS.2b18aa2358054883dbe1d2e886b18e90.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ