Steal[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Steal.zip
Size

11.4MB
MD5

c50d67b65845a9f7aebccc073f6286fb
SHA1

d11f1320be52fd01cc220f89edb64499b638d550
SHA256

1fcac4f80b0587f747791048a605fd0ae0f857b3e05e7082f2be07f8511b01ed
SHA512

c434819645e7969de8fef1917663e45e28eb05935755dd727d7f9bcef4f88813be895a0adf5ab0fbe483ace8893fadafe1adca7a1be8d433e2798deee547ac4a
SSDEEP

196608:NP5U7BItERn7AGcUUIHABiKtrx0CIXfry0Qh+vl6jDD12rLp6Iw+3UgIaf:9S72tSn8GtSi2r2w+d+X1k13x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/23c81c824177bc39dc8131bb8c25661ffecf0026501a7d074b49ff0eabc10b25.exe

Files

Steal.zip
.zip
23c81c824177bc39dc8131bb8c25661ffecf0026501a7d074b49ff0eabc10b25.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11.3MB - Virtual size: 11.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 381KB - Virtual size: 381KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ