stealc | 41501043f195d4c60674bb378e7f0910N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41501043f195d4c60674bb378e7f0910N
Size

194KB
MD5

41501043f195d4c60674bb378e7f0910
SHA1

c5e5e6a99590ec732f317acc699ea078c4f31d80
SHA256

9860c9a9f21f2d5b91a1b280628a313894e86b14b4d29bc5f150dda7240a3ede
SHA512

031bf975b8aff546ea428a6721c760cb23105b5b98671fb643eea61f372e30ab041559438e3b9bd10d22765c52e24886ad51c7619b3730ba299735805e10e26d
SSDEEP

3072:XCbIe74znwdguLtmvhWtSW04I1hna9vyVATPWbPnjOkrrsxnxJ4W:XCkQ4zwqmmJfWA1Ja0QPuPnjmxn34

Score

10^/10

stealc

Malware Config

Signatures

Stealc family
stealc

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41501043f195d4c60674bb378e7f0910N

Files

41501043f195d4c60674bb378e7f0910N
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ