stealer tools.zip
- SHA256 7089a8179efa6c83ec6cac9f54648e85fb903e56a966c3a5874c5a95a81c3638
Overview
overview
10Static
static
7dashboard ...rd.exe
windows7-x64
10dashboard ...rd.exe
windows10-2004-x64
10open for m...fo.exe
windows7-x64
3open for m...fo.exe
windows10-2004-x64
password g...er.exe
windows7-x64
10password g...er.exe
windows10-2004-x64
10stealer to...rd.exe
windows7-x64
3stealer to...rd.exe
windows10-2004-x64
3stealer to...on.exe
windows7-x64
10stealer to...on.exe
windows10-2004-x64
Behavioral task
behavioral1
Sample
dashboard for all stealers (recomended for start)/paid dashboard.exe
Resource
win7-20240708-en
windows7-x64
14 signatures
1800 seconds
Behavioral task
behavioral2
Sample
dashboard for all stealers (recomended for start)/paid dashboard.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
15 signatures
1800 seconds
Behavioral task
behavioral3
Sample
open for more info/more info.exe
Resource
win7-20240705-en
windows7-x64
1 signatures
1800 seconds
Behavioral task
behavioral4
Sample
open for more info/more info.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
13 signatures
1800 seconds
Behavioral task
behavioral5
Sample
password grabber recommended/password stealer.exe
Resource
win7-20240704-en
windows7-x64
21 signatures
1800 seconds
Behavioral task
behavioral6
Sample
password grabber recommended/password stealer.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
19 signatures
1800 seconds
Behavioral task
behavioral7
Sample
stealer tool (most recomended)/stealer tool dashboard.exe
Resource
win7-20240705-en
windows7-x64
2 signatures
1800 seconds
Behavioral task
behavioral8
Sample
stealer tool (most recomended)/stealer tool dashboard.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
1800 seconds
Behavioral task
behavioral9
Sample
stealer tool + secret options/ADM Adrenaline Ultimate Edition.exe
Resource
win7-20240704-en
windows7-x64
19 signatures
1800 seconds
Behavioral task
behavioral10
Sample
stealer tool + secret options/ADM Adrenaline Ultimate Edition.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
20 signatures
1800 seconds
General
- Target stealer tools.zip
- Size 66.9MB
- Sample240815-v1anystflf
- SHA256 7089a8179efa6c83ec6cac9f54648e85fb903e56a966c3a5874c5a95a81c3638
- MD5 9e013a9f14a38757258d7ad4fe503303
- SHA1 32281f6b401a4dc3a9bde0e8cfe9a95e14aa11cf
- SHA512 3b4fe9243362d2b70d61f3bb51ccf3497ec987c824a1082459d152a21823f87cc8764e9894f06df4445d017bea13a279dd44fc1fcba07d6dd1947c52cf3d8763
- SSDEEP 1572864:PaCryU++hoAU2Ht0sbzxzOYwbb9AYFRgWZH59MoKtZoc:iCrl+oqpnbb9AoRB159MzP
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
-
resource yara_rule static1/unpack001/dashboard for all stealers (recomended for start)/paid dashboard.exe upx - Unsigned PE 5 IoCs
Checks for missing Authenticode signature.
resource unpack001/dashboard for all stealers (recomended for start)/paid dashboard.exe unpack001/open for more info/more info.exe unpack001/password grabber recommended/password stealer.EXE unpack001/stealer tool (most recomended)/stealer tool dashboard.exe unpack001/stealer tool + secret options/ADM Adrenaline Ultimate Edition.exe
File Explorer
-
stealer tools.zip.zip 66.9MB
-
dashboard for all stealers (recomended for start)/README.txt70B
-
dashboard for all stealers (recomended for start)/paid dashboard.exe.exe 2.5MB
-
open for more info/README.txt70B
-
open for more info/more info.exe.exe 666KB
-
password grabber recommended/README.txt70B
-
password grabber recommended/password stealer.EXE.exe 3.4MB
-
stealer tool (most recomended)/README.txt70B
-
stealer tool (most recomended)/stealer tool dashboard.exe.exe 51.7MB
-
stealer tool + secret options/ADM Adrenaline Ultimate Edition.exe.exe 15.0MB
-
stealer tool + secret options/README.txt70B
dashboard for all stealers (recomended for start)/README.txt
- SHA256 b8f99b6d1c651864218e9233829d94fff4808367c3984ac015e2e5cb91802bef
- MD5 30239405e52fab1f1dbf61ecd533e090
- SHA1 6510fb9ad2ea2142cecd70b90cc091a92b86fd4c
- SHA512 e5eeb3c71ebbbfc1b2c32aceecd019818e49610beada1c577c42839ce3cbb0692f417e0508f86cd9a9da77638325026488e1e6983837515a02ea87e79a45ac73
- MD5 SHA1 SHA512
dashboard for all stealers (recomended for start)/paid dashboard.exe
- SHA256 1811c7b5ddcc6637a782bf32db70b60bd0bf3ec2b3498716591f718cda25fd14
- MD5 660e26001a8891e78135a09d3ec2623f
- SHA1 bd95c1955be08eaecefa7b3dd1cbdac7387b6d06
- SHA512 590df723aaa52806f664adec89bf6e8e570a9c88b4858131fb59f23e31ab3302189393bceb58fe1aa71475065aefab2d093d5f8ad6296693d4124e5a10a34e92
- SSDEEP 49152:cCEz1VWQraflEcY8GSFJ2CBUm5htDRvG0JuH0Xv6GVO8UKlo:cn14QilESfFim15rtxUuo
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10315440
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
UPX0
Size
Virtual Size
7.4MB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
2.5MB
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
open for more info/README.txt
- SHA256 b8f99b6d1c651864218e9233829d94fff4808367c3984ac015e2e5cb91802bef
- MD5 30239405e52fab1f1dbf61ecd533e090
- SHA1 6510fb9ad2ea2142cecd70b90cc091a92b86fd4c
- SHA512 e5eeb3c71ebbbfc1b2c32aceecd019818e49610beada1c577c42839ce3cbb0692f417e0508f86cd9a9da77638325026488e1e6983837515a02ea87e79a45ac73
- MD5 SHA1 SHA512
open for more info/more info.exe
- IMPHASH f400a8c725e9bcee856360087d72fec3
- SHA256 d30d7676a3b4c91b77d403f81748ebf6b8824749db5f860e114a8a204bca5b8f
- MD5 989ae3d195203b323aa2b3adf04e9833
- SHA1 31a45521bc672abcf64e50284ca5d4e6b3687dc8
- SHA512 e9d4e6295869f3a456c7ea2850c246d0c22afa65c2dd5161744ee5b3e29e44d9a2d758335f98001cdb348eaa51a71cd441b4ddc12c8d72509388657126e69305
- SSDEEP 12288:85J5X487qJUtcWfkVJ6g5s/cD01oKHQyis2AePsr8nP712TB:s487pcZEgwcDpg1L2tbPR2t
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
1860622
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
GetModuleHandleA
GetProcAddress
netapi32
NetUserAdd
ntdll
RtlGetVersion
user32
GetDC
gdi32
BitBlt
advapi32
FreeSid
shell32
ShellExecuteW
ole32
CoTaskMemFree
bcrypt
BCryptGenRandom
vcruntime140
wcsstr
api-ms-win-crt-string-l1-1-0
wmemcpy_s
api-ms-win-crt-runtime-l1-1-0
exit
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
_set_fmode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
Name
.MPRESS1
Size
609KB
Virtual Size
1.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.MPRESS2
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
18KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
password grabber recommended/README.txt
- SHA256 b8f99b6d1c651864218e9233829d94fff4808367c3984ac015e2e5cb91802bef
- MD5 30239405e52fab1f1dbf61ecd533e090
- SHA1 6510fb9ad2ea2142cecd70b90cc091a92b86fd4c
- SHA512 e5eeb3c71ebbbfc1b2c32aceecd019818e49610beada1c577c42839ce3cbb0692f417e0508f86cd9a9da77638325026488e1e6983837515a02ea87e79a45ac73
- MD5 SHA1 SHA512
password grabber recommended/password stealer.EXE
- IMPHASH 68f013d7437aa653a8a98a05807afeb1
- SHA256 ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa
- MD5 84c82835a5d21bbcf75a61706d8ab549
- SHA1 5ff465afaabcbf0150d1a3ab2c2e74f3a4426467
- SHA512 90723a50c20ba3643d625595fd6be8dcf88d70ff7f4b4719a88f055d5b3149a4231018ea30d375171507a147e59f73478c0c27948590794554d031e7d54b7244
- SSDEEP 98304:QqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2g3x:QqPe1Cxcxk3ZAEUadzR8yc4gB
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
30650
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
GetFileAttributesW
GetFileSizeEx
CreateFileA
InitializeCriticalSection
DeleteCriticalSection
ReadFile
GetFileSize
WriteFile
LeaveCriticalSection
EnterCriticalSection
SetFileAttributesW
SetCurrentDirectoryW
CreateDirectoryW
GetTempPathW
GetWindowsDirectoryW
GetFileAttributesA
SizeofResource
LockResource
LoadResource
MultiByteToWideChar
Sleep
OpenMutexA
GetFullPathNameA
CopyFileA
GetModuleFileNameA
VirtualAlloc
VirtualFree
FreeLibrary
HeapAlloc
GetProcessHeap
GetModuleHandleA
SetLastError
VirtualProtect
IsBadReadPtr
HeapFree
SystemTimeToFileTime
LocalFileTimeToFileTime
CreateDirectoryA
GetStartupInfoA
SetFilePointer
SetFileTime
GetComputerNameW
GetCurrentDirectoryA
SetCurrentDirectoryA
GlobalAlloc
LoadLibraryA
GetProcAddress
GlobalFree
CreateProcessA
CloseHandle
WaitForSingleObject
TerminateProcess
GetExitCodeProcess
FindResourceA
user32
wsprintfA
advapi32
CreateServiceA
OpenServiceA
StartServiceA
CloseServiceHandle
CryptReleaseContext
RegCreateKeyW
RegSetValueExA
RegQueryValueExA
RegCloseKey
OpenSCManagerA
msvcrt
realloc
fclose
fwrite
fread
fopen
sprintf
rand
srand
strcpy
memset
strlen
wcscat
wcslen
__CxxFrameHandler
??3@YAXPAX@Z
memcmp
_except_handler3
_local_unwind2
wcsrchr
swprintf
??2@YAPAXI@Z
memcpy
strcmp
strrchr
__p___argv
__p___argc
_stricmp
free
malloc
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
??0exception@@QAE@ABQBD@Z
_CxxThrowException
calloc
strcat
_mbsstr
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
Name
.text
Size
28KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
3.3MB
Virtual Size
3.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=12, version=7291,
count=1, id=11, version=8047,
count=4, id=14, version=7299,
count=11, id=10, version=8047,
count=4, id=4, version=8047,
count=13, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=163, id=1, productName=Unmarked objects,
count=7, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
stealer tool (most recomended)/README.txt
- SHA256 b8f99b6d1c651864218e9233829d94fff4808367c3984ac015e2e5cb91802bef
- MD5 30239405e52fab1f1dbf61ecd533e090
- SHA1 6510fb9ad2ea2142cecd70b90cc091a92b86fd4c
- SHA512 e5eeb3c71ebbbfc1b2c32aceecd019818e49610beada1c577c42839ce3cbb0692f417e0508f86cd9a9da77638325026488e1e6983837515a02ea87e79a45ac73
- MD5 SHA1 SHA512
stealer tool (most recomended)/stealer tool dashboard.exe
- SHA256 83ddf34331d00285918cff184a6a8ff26fc8d6682018bdee6cf54cb7824fe8d8
- MD5 e1dfc4f445c9d5eb075009970c116128
- SHA1 46b9604d6c5cd96204bf51a754520003455f1aa3
- SHA512 fec0cde77d6accba6976b3864302ba801f450df440bbc8b38386bc3fbf2cf3b12773d04c32480f67ede4396bafe3a34b0500d776d9d7d489c466eac80b2180de
- SSDEEP 1572864:AKsj6R2Q/mBlOYlGLTHY9G4FEujFMm+B997DaNHN1oS72fnD9hRzZ01tO0DpvrvI:C6WcLjY9G4FEujFMm+B997DaNHN1oS76
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
691936
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
672KB
Virtual Size
671KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
34KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
6KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
36B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
43KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
50.9MB
Virtual Size
50.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
stealer tool + secret options/ADM Adrenaline Ultimate Edition.exe
- IMPHASH a8f9817be32c1d5589680a5066ebff5d
- SHA256 fc7e799742a1c64361a8a9c3fecdf44f9db85f0bf57f4fb5712519d12ba4c5ac
- MD5 8f5a2b3154aba26acf5440fd3034326c
- SHA1 b4d508ee783dc1f1a2cf9147cc1e5729470e773b
- SHA512 01c052c71a2f97daf76c91765e3ee6ec46ca7cb67b162c2fc668ef5ee35399622496c95568dedffbaf72524f70f6afcfe90f567fbb653a93d800664b046cd5f2
- SSDEEP 393216:l2iLiU7VXd6AKprP7iJx4J20cQ3qpalJZfhxGWqIcckC:l2iNObp4x820AS7nj
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
msvcrt
memset
wcsncmp
memmove
wcsncpy
wcsstr
_wcsnicmp
_wcsicmp
wcslen
wcscpy
wcscmp
memcpy
tolower
wcscat
malloc
free
kernel32
GetModuleHandleW
HeapCreate
GetStdHandle
HeapDestroy
ExitProcess
WriteFile
LoadLibraryExW
EnumResourceTypesW
FreeLibrary
RemoveDirectoryW
GetExitCodeProcess
EnumResourceNamesW
GetTempFileNameW
GetCommandLineW
LoadResource
SizeofResource
FreeResource
FindResourceW
GetNativeSystemInfo
GetShortPathNameW
GetWindowsDirectoryW
GetSystemDirectoryW
EnterCriticalSection
CloseHandle
LeaveCriticalSection
InitializeCriticalSection
WaitForSingleObject
TerminateThread
CreateThread
Sleep
GetProcAddress
GetVersionExW
WideCharToMultiByte
HeapAlloc
HeapFree
LoadLibraryW
GetCurrentProcessId
GetCurrentThreadId
GetModuleFileNameW
GetEnvironmentVariableW
SetEnvironmentVariableW
GetCurrentProcess
TerminateProcess
SetUnhandledExceptionFilter
HeapSize
MultiByteToWideChar
CreateDirectoryW
SetFileAttributesW
DeleteFileW
GetTempPathW
GetCurrentDirectoryW
SetCurrentDirectoryW
CreateFileW
SetFilePointer
TlsFree
TlsGetValue
TlsSetValue
TlsAlloc
HeapReAlloc
DeleteCriticalSection
InterlockedCompareExchange
InterlockedExchange
GetLastError
SetLastError
UnregisterWait
GetCurrentThread
DuplicateHandle
RegisterWaitForSingleObject
user32
CharUpperW
CharLowerW
MessageBoxW
DefWindowProcW
DestroyWindow
GetWindowLongW
GetWindowTextLengthW
GetWindowTextW
UnregisterClassW
LoadIconW
LoadCursorW
RegisterClassExW
IsWindowEnabled
EnableWindow
GetSystemMetrics
CreateWindowExW
SetWindowLongW
SendMessageW
SetFocus
CreateAcceleratorTableW
SetForegroundWindow
BringWindowToTop
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
DestroyAcceleratorTable
PostMessageW
GetForegroundWindow
GetWindowThreadProcessId
IsWindowVisible
EnumWindows
SetWindowPos
gdi32
GetStockObject
comctl32
InitCommonControlsEx
shell32
ShellExecuteExW
SHGetFolderLocation
SHGetPathFromIDListW
winmm
timeBeginPeriod
ole32
CoInitialize
CoTaskMemFree
shlwapi
PathQuoteSpacesW
PathAddBackslashW
PathRenameExtensionW
PathRemoveArgsW
PathRemoveBackslashW
Name
.code
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.text
Size
51KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
14.9MB
Virtual Size
14.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
stealer tool + secret options/README.txt
- SHA256 b8f99b6d1c651864218e9233829d94fff4808367c3984ac015e2e5cb91802bef
- MD5 30239405e52fab1f1dbf61ecd533e090
- SHA1 6510fb9ad2ea2142cecd70b90cc091a92b86fd4c
- SHA512 e5eeb3c71ebbbfc1b2c32aceecd019818e49610beada1c577c42839ce3cbb0692f417e0508f86cd9a9da77638325026488e1e6983837515a02ea87e79a45ac73
- MD5 SHA1 SHA512