Behavioral task
behavioral1
Sample
f80400459be849fddbd8eab9d922d356e289d23c13af4f49e09a8b7df4f41b17.exe
Resource
win7-20240903-en
General
-
Target
f80400459be849fddbd8eab9d922d356e289d23c13af4f49e09a8b7df4f41b17.exe
-
Size
194KB
-
MD5
4e9ff90c6ded1a8c1e1eb52006a0a8dc
-
SHA1
192055ae0a6398531b4ed2b998abf33b172c607b
-
SHA256
f80400459be849fddbd8eab9d922d356e289d23c13af4f49e09a8b7df4f41b17
-
SHA512
8068de16570637ce49e78dcb02bc05641fcc9c34e37f8cd55ad2a7ef9347bd78f4de5bd706e5775834b3650197032201eee80e1064f56e9f7776379e191356ef
-
SSDEEP
3072:KCbBe74znwdguLtmvhWtSW04I1hna9vyVATPWSFssPnxJ4W:KCNQ4zwqmmJfWA1Ja0QPbF9Pn34
Malware Config
Signatures
-
Stealc family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f80400459be849fddbd8eab9d922d356e289d23c13af4f49e09a8b7df4f41b17.exe
Files
-
f80400459be849fddbd8eab9d922d356e289d23c13af4f49e09a8b7df4f41b17.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ