marsstealer | 1364-9-0x0000000000400000-0x000000000043D000-memory[.]dmp

General

Target
1364-9-0x0000000000400000-0x000000000043D000-memory.dmp
Size 244KB
Sample240404-bg8xvsac2y
SHA256 51cb71ecb367754d09285dd9e19ec677837ad2c76bf033a58752f1a803be9d7f
MD5 9d9dd65c709d5b14f4f2e5b0ee9ea881
SHA1 9b0c6c6207e9942e05f6e9fe7bf2e7d210e1ae53
SHA512 de5176c46b9921b139bb6dedabcf629b007a2bd885bfd52f71a1731f38c485b80cfa69d257bfc3e1a77bd21a469e5a22ed8047d8f9e99acbf1efcb37a66728df
SSDEEP 3072:Um/E8k9ZjpIn+zNch12KbAwSaSAJSp8kzb8EG:N/E8k91rz6/tOn8EG
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Family

Botnet

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1364-9-0x0000000000400000-0x000000000043D000-memory.dmp

SHA256 51cb71ecb367754d09285dd9e19ec677837ad2c76bf033a58752f1a803be9d7f
MD5 9d9dd65c709d5b14f4f2e5b0ee9ea881
SHA1 9b0c6c6207e9942e05f6e9fe7bf2e7d210e1ae53
SHA512 de5176c46b9921b139bb6dedabcf629b007a2bd885bfd52f71a1731f38c485b80cfa69d257bfc3e1a77bd21a469e5a22ed8047d8f9e99acbf1efcb37a66728df
SSDEEP 3072:Um/E8k9ZjpIn+zNch12KbAwSaSAJSp8kzb8EG:N/E8k91rz6/tOn8EG
MD5 SHA1 SHA512 SSDEEP

Minor OS version

1

Major OS version

5

Entry point

245938

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths