Static task
static1
Behavioral task
behavioral1
Sample
steal.exe
Resource
win7-20240704-en
General
-
Target
steal.zip
-
Size
402KB
-
MD5
6af05ebdf3359208b47ff500c169f494
-
SHA1
abda08cb119b703e7befb0ff195b10fbc10de68b
-
SHA256
04dbde5485209963a050786c4b2348e797b9c01ef1c145f2543d8f5748d9d745
-
SHA512
de547d8c49cc445f3592f7d29edc5259b61dc9d1ee1fb2ccfec3b5a8f47f3508df5e53880bd7e5cbee75ca951d2333984016462b3ffd2a37888ca7a2ec4ecbac
-
SSDEEP
12288:86BObmC0PeSW2Sew2wqvjtCUIjOCTHUUdrU2:rBObmiSWsBj6jOwH3drU2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/steal.exe
Files
-
steal.zip.zip
Password: 123
-
steal.exe.exe windows:4 windows x86 arch:x86
Password: 123
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 615KB - Virtual size: 615KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ