Bitcoin_Stealer_v3[.]0[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Bitcoin_Stealer_v3.0.rar
Size

108KB
MD5

5abdbe01aa56aa5e58a6dc0d6c03a2f3
SHA1

4f1a135881f019d8db86de56877838c3a001ccff
SHA256

178a6fab05c5a6e42b6360f7e4532b9d3fac9aeee5d2a1db89b9e1a37eb42102
SHA512

2e2382d3ae1efda2680be317e00b6c70cb2019e16833f9ab45c3c63aee40fdb30c34b7d56fb3320786de668a8373affc9a79f5d3e86069017349e5cd030c1f14
SSDEEP

3072:pmqjZlJQ1UpJhZmr+dzFQ1UV2BqDZw6j8Ao:pmqFlN4r+zQ1UV28zIF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Bitcoin Stealer v3.0.exe

Files

Bitcoin_Stealer_v3.0.rar
.rar
Bitcoin Stealer v3.0.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Screenshot.jpg
.jpg