file[.]exe | Triage™

General

Target
file.exe
Size 2.8MB
Sample240820-ve4pxaxblm
SHA256 b3e2fe43f3024cc479415e745cd9826752debe4e8b208e5e5b7cc510723b787d
MD5 2bd4145da31909b2dc0d423a626224a7
SHA1 d9427ef6a480a7bf215c6a8c66f62ed381f46ce3
SHA512 2e7791925e1d47971ae6bfc3e7615fa3763dd0ddd53bbc01221a925d8e1fb8afaf2bbec8ae2a16a0de1aca0006adf849c4f6a91f525b49a1acd676485a7253d4
SSDEEP 49152:SduoyX7+W4BDj/pPVWUzEMp5Es883PACkRKJzAvfiOc/NLHG5ZiKfOQUO:SduoyXwBl8JIlqKJzbOcFC5ZKQUO
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 2.8MB

file.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 b3e2fe43f3024cc479415e745cd9826752debe4e8b208e5e5b7cc510723b787d
MD5 2bd4145da31909b2dc0d423a626224a7
SHA1 d9427ef6a480a7bf215c6a8c66f62ed381f46ce3
SHA512 2e7791925e1d47971ae6bfc3e7615fa3763dd0ddd53bbc01221a925d8e1fb8afaf2bbec8ae2a16a0de1aca0006adf849c4f6a91f525b49a1acd676485a7253d4
SSDEEP 49152:SduoyX7+W4BDj/pPVWUzEMp5Es883PACkRKJzAvfiOc/NLHG5ZiKfOQUO:SduoyXwBl8JIlqKJzbOcFC5ZKQUO
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

2830990

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\press\AppData\Local\Temp\Report.A66214F7-6635-4084-8609-050NK772EXE\obj\Debug\stealc_cry.pdb

file.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

file.exe

mscoree

dotnet