stealc | 2376-0-0x0000000000400000-0x0000000000661000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2376-0-0x0000000000400000-0x0000000000661000-memory.dmp
Size

2.4MB
MD5

8961de6b4a24896d6982dd71135c1162
SHA1

e491d97ba538fb6aa36c36d78f6423b45751820e
SHA256

4a5934478143a3b0b1f0196ee3ddd63131e071791bacb62c61e4455bea559f01
SHA512

06815e17e1106a612255e3e87d7a0c9bcda9e9260dbbff574f2a61c11df18bd0092b675bd2f1a493c13b33c2af8d3022732d15c17c091718ff04c3b975985afe
SSDEEP

6144:kLis2YtUokCulxMfpbTXe38ETFYcU77+Uw:mtUoH3pXYDTFFI7x

Score

10^/10

stealc

Malware Config

Signatures

Stealc family
stealc

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2376-0-0x0000000000400000-0x0000000000661000-memory.dmp

Files

2376-0-0x0000000000400000-0x0000000000661000-memory.dmp
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 121KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ