General

  • Target
    06f42fa9e9d8f0c01a7c560490ea71e4cc582069527a5336cdfc299ed1e67c32.exe
  • Size 35.5MB
  • Sample260703-n876vsdv8l
  • SHA256 06f42fa9e9d8f0c01a7c560490ea71e4cc582069527a5336cdfc299ed1e67c32
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Family: Stealc

    Stealc is an infostealer written in C++.

  • Detects Stealc stealer Version 2 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • Inno Setup is an open-source installation builder for Windows applications. 1 IoCs

    Inno Setup installer

File Explorer

  • 06f42fa9e9d8f0c01a7c560490ea71e4cc582069527a5336cdfc299ed1e67c32.exe
    .exe 35.5MB
  • xx.pyc
    35KB

06f42fa9e9d8f0c01a7c560490ea71e4cc582069527a5336cdfc299ed1e67c32.exe

  • IMPHASH 1f74bdd8275d1c99b371f4a5243e6cb0
  • SHA256 06f42fa9e9d8f0c01a7c560490ea71e4cc582069527a5336cdfc299ed1e67c32
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Detects Stealc stealer Version 2

  • Unsigned PE

    Checks for missing Authenticode signature.

  • Inno Setup is an open-source installation builder for Windows applications.

    Inno Setup installer

Minor OS version
0
Major OS version
6
Entry point
6252
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths