Behavioral task
behavioral1
Sample
1729664785c22dd39cac6b7c69644b35ec783f80060f2618958aa9dc8f08da2f959a9ab987982.dat-decoded.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
1729664785c22dd39cac6b7c69644b35ec783f80060f2618958aa9dc8f08da2f959a9ab987982.dat-decoded.exe
Resource
win10v2004-20241007-en
General
-
Target
1729664785c22dd39cac6b7c69644b35ec783f80060f2618958aa9dc8f08da2f959a9ab987982.dat-decoded.exe
-
Size
2.0MB
-
MD5
ef72d8ba1e0ebb3b25fcddb5960f529b
-
SHA1
bbd2be73efee8f60e0898ab1db4cc314df5de164
-
SHA256
da70238b1af03ec6102f7466234cc80ab1f939b1e2f1754efa94b07054ebb53b
-
SHA512
aff7ebbfd8cee839dfc09b888274459795268745cfda9fcb2018904c2ad2b5dd7beb912b50bb3df61b0304630d0394691ce1d5ce03f3f01cc3509332be235f71
-
SSDEEP
49152:NrDvRZ95NR13rJbsUKrYqgkFH73jORjb2:JltNR13rJotYqgUH72
Malware Config
Signatures
-
Stealerium family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1729664785c22dd39cac6b7c69644b35ec783f80060f2618958aa9dc8f08da2f959a9ab987982.dat-decoded.exe
Files
-
1729664785c22dd39cac6b7c69644b35ec783f80060f2618958aa9dc8f08da2f959a9ab987982.dat-decoded.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ