stager[.]exe | Triage

Resubmissions

23-11-2023 17:25

231123-vzamkabh3z 3

23-11-2023 17:22

231123-vxjgpaah95 3

Sharing

General

Target

stager.exe
Size

598KB
MD5

c577f714171b4283e252173d6e0c7325
SHA1

abe1cb6bde61c22e018f1094ac29caa56fff9d79
SHA256

ebb7bc85b4b7e4117e39b67a0984145d4fd2247369f0fa136bc4534cdaef953f
SHA512

fb4241dc5de8d5aa1c9cbd2fa9306381764bc4268564e719481041b83fe5233c991bb2b655ad51772bc9442689264ed35c198c1ee3ba5770e1dc05f863082984
SSDEEP

12288:9te0DvuxHpSyjc1SfUQ9yDquGHcCfELHw9723NKapax:ne0DvuxJDjc9Qc+uG8NLHxdox

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
stager.exe

Files

stager.exe
.dll windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.text
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ