Static task
static1
Behavioral task
behavioral1
Sample
ext-stalker-cs_+7_fixed.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ext-stalker-cs_+7_fixed.exe
Resource
win10v2004-20231215-en
General
-
Target
249d2a08db6cb716fbeb3004d39f6dbd
-
Size
33KB
-
MD5
249d2a08db6cb716fbeb3004d39f6dbd
-
SHA1
bec23a225ec24a13d299cee13381c6d09550cfd9
-
SHA256
a5c58efa0a504df47377efa9722308d760ea3b9baf26639128bc821dc1cb1bb4
-
SHA512
e15b65f13e3219ffbc88202b68557c859ee018357406afbe581ed98d160299d2b671b9c1b8a69e3e82aa5f66a0b0a3bcb0f063c4c800d0f85a330b29f21c513f
-
SSDEEP
768:LSm2TKn4igKQy9UT/iNkaHpBg3+DV2zwvqWR1ix8cq3ymYKlP:LSm2TK4igKQ7sHHpBI04wC6cSGKlP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ext-stalker-cs_+7_fixed.exe
Files
-
249d2a08db6cb716fbeb3004d39f6dbd.rar
-
Read Me!.txt
-
ext-stalker-cs_+7_fixed.exe.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
LoadLi Size: 4KB - Virtual size: 1830.1MB
Size: 144KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA