Behavioral task
behavioral1
Sample
build.exe
Resource
win10-20240404-en
General
-
Target
build.rar
-
Size
1.5MB
-
MD5
0c5201e3998d0ffcbb67ee078f994d29
-
SHA1
baf95ffc8ea83e71e2e7151da9ccec20d2bc5046
-
SHA256
7a39cd859927f04609e190a5af8cb802f11bc959169773c3ecfeb92db0e23bb8
-
SHA512
4c3c0c2636eb0ebd5a9ded604ec9ba12d6adc12f4982fe000d994e4de09545af31369ceb3ec8973ddce72f67fea1cb67b83dbf0c11e50256d0bf2ae2a6e5d6e8
-
SSDEEP
24576:kuJEp9eO5n+ghMpzhv55bntwiygsD1bYlb+4re2NZB+o01/1aFHWJDEZ+cB6VKAy:kwyHLhMhhDtwBgs5qVNZc/4gJD/oxUut
Malware Config
Extracted
stealerium
https://discord.com/api/webhooks/1234510856528728164/nFqIn7bd6bnTFMUgt7PK_8hX3jIZf38JR1mxd-DaAnfjOHNlSmQ03q7xPl-IWfe3ShJJ
Signatures
-
Stealerium family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/build.exe
Files
-
build.rar.rar
-
build.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ