Behavioral task
behavioral1
Sample
17290298480ee7016109c326cc9c8874d16650a6f4e1b687212daf08dfd0fddf7db33b6acb972.dat-decoded.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
17290298480ee7016109c326cc9c8874d16650a6f4e1b687212daf08dfd0fddf7db33b6acb972.dat-decoded.exe
Resource
win10v2004-20241007-en
General
-
Target
17290298480ee7016109c326cc9c8874d16650a6f4e1b687212daf08dfd0fddf7db33b6acb972.dat-decoded.exe
-
Size
1.7MB
-
MD5
6f869017df36306de1d8c82bedf7ed0f
-
SHA1
69d300a22335e864513b3b0c480d73939595e061
-
SHA256
cfefa051882ac72f07443f1cce67d3a46c46bafe3f76234d4bed635889aedc06
-
SHA512
88a5148e697ac34a2366dd32b6e1e3ed42eb49499bdd9cb292db773808577a3f5ae060ad102f494a826d971b8073a99971d3176867d8bdcf66666c0b18328c25
-
SSDEEP
49152:VRvVPCAQpw6Xm6DKnUxXoC7KBYoNqN2G+b1GY:Vv4w6WUKn2JKYogN
Malware Config
Signatures
-
Stealerium family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17290298480ee7016109c326cc9c8874d16650a6f4e1b687212daf08dfd0fddf7db33b6acb972.dat-decoded.exe
Files
-
17290298480ee7016109c326cc9c8874d16650a6f4e1b687212daf08dfd0fddf7db33b6acb972.dat-decoded.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ