Behavioral task
behavioral1
Sample
2244-0-0x0000000000880000-0x0000000000F0D000-memory.exe
Resource
win7-20240903-en
General
-
Target
2244-0-0x0000000000880000-0x0000000000F0D000-memory.dmp
-
Size
6.6MB
-
MD5
9541bb552c834de4bcc0fb1906653e3c
-
SHA1
be76a9442df4a49b9aaa57acf1af5957240454e7
-
SHA256
86c65089cc89ee44a3b570bc961f8d8c1abd69b459661452b71fb54b8dee00c2
-
SHA512
b4127917d38e174c57e36768aece75c7c43baf8c3c02b6d9ba6def0fcd0266a7bffc47ab1d9c1babef7158709829dcc3c9f2d0fe20409e2aca9c0a2113870163
-
SSDEEP
6144:HOmizw/4oDNZ65iqkXzCOVo71OIgOZjc2vVK8Tyft+nrrtHj:D/4oDHnXC2VBOZjR3TQtqZH
Malware Config
Signatures
-
Stealc family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2244-0-0x0000000000880000-0x0000000000F0D000-memory.dmp
Files
-
2244-0-0x0000000000880000-0x0000000000F0D000-memory.dmp.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 138KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oujhelqp Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tgqolrxh Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE