C:\Users\press\AppData\Local\Temp\Report.A66214F7-6635-4084-8609-050NK772EXE\obj\Debug\stealc_cry.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b3e2fe43f3024cc479415e745cd9826752debe4e8b208e5e5b7cc510723b787d.exe
Resource
win7-20240705-en
General
-
Target
b3e2fe43f3024cc479415e745cd9826752debe4e8b208e5e5b7cc510723b787d.exe
-
Size
2.8MB
-
MD5
2bd4145da31909b2dc0d423a626224a7
-
SHA1
d9427ef6a480a7bf215c6a8c66f62ed381f46ce3
-
SHA256
b3e2fe43f3024cc479415e745cd9826752debe4e8b208e5e5b7cc510723b787d
-
SHA512
2e7791925e1d47971ae6bfc3e7615fa3763dd0ddd53bbc01221a925d8e1fb8afaf2bbec8ae2a16a0de1aca0006adf849c4f6a91f525b49a1acd676485a7253d4
-
SSDEEP
49152:SduoyX7+W4BDj/pPVWUzEMp5Es883PACkRKJzAvfiOc/NLHG5ZiKfOQUO:SduoyXwBl8JIlqKJzbOcFC5ZKQUO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3e2fe43f3024cc479415e745cd9826752debe4e8b208e5e5b7cc510723b787d.exe
Files
-
b3e2fe43f3024cc479415e745cd9826752debe4e8b208e5e5b7cc510723b787d.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ