General
-
Target
StealLoader.exe
-
Size
264KB
-
MD5
35ed94aab4fc9c4e56d9e966c49b5039
-
SHA1
db7aff1ac52bfa8bb30959a60e98de99df8aacb8
-
SHA256
cca66b727750ed3458229f9bd97be7fcd1d2d854ac936ef549101a975b1f9ec7
-
SHA512
55f6616a39900369eefb8b9e9b8e31d3ff57149c705845d1f50e0f63ddcb5c45528a43fb1ef17063f0a5beb1a20fdd9ceb4e21543d83eae8769f60b05f3ca765
-
SSDEEP
3072:7nQcvX9muR4B3UCQWxahPw+6SNzDyWzCO3ME1rbOkevefKcy9Fv0q92TyP:dlDyuCQMSNPyWeO3vrbovgEx0qg+
Score
7/10
Malware Config
Signatures
-
.NET Reactor proctector 1 IoCs
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
StealLoader.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections