stealc | bd3f94cbcf6f8c855c096822635c9b7b[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd3f94cbcf6f8c855c096822635c9b7b.bin
Size

7.7MB
MD5

bd3f94cbcf6f8c855c096822635c9b7b
SHA1

c625854fd6b95d1ad83debc688f66f8c9eada431
SHA256

26c139751362cab50e92d42e0ada41c579928a76f3d4be1f164b9da7d4dbf8e7
SHA512

673611e900713999fe83b195e86c069ecb72b02f29cf4c23b92e0fd827752204746bcd4bc55c83eb2bbb496da2314acc41b803cb4f66c6bb49e06d35430481b3
SSDEEP

24576:k7qLT8RGwci+R0RP/XxeLes9zCopnT0h71Nr88w/5SzwhPM+8rO5W+zkHqKiIsK2:

Score

10^/10

stealc

Malware Config

Signatures

Stealc family
stealc

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd3f94cbcf6f8c855c096822635c9b7b.bin

Files

bd3f94cbcf6f8c855c096822635c9b7b.bin
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ