salatstealer | WexSide Crack 2026 Working[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
WexSide Crack 2026 Working.zip
Size 2.9MB
Sample260816-kbvygstdmf
SHA256 ab607393b5cf92d40de315c78bc1063e6ac992b50634abcf5cd018a196aa9a92
MD5 c938b6dc0ec4f7876f1eeca8e88a9a17
SHA1 b29317524e6514a8a2a10e801c8e87f2de37b1d6
SHA512 25b857abd0e8611c6013650f539829fa5b107db1576bfbd39fe235b9ce9cf67330363975836375ecfea6b70194bc51c1e3b8ac7090da40e769d04b81d31174a5
SSDEEP 49152:2De6dixaGl0VX3dzSu6qhy36RVWKrbVxO8Ey//bxbkE0cNnnyYHp056Pyv0OLg27:60vUdWPDqrlO8d550cNyya6aMYn5+RVU
TLSH
T127E533DCD9B2361790FBEAEBC8730AA472C1E98B2B7BED3759DC9AD0751D40540205B8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

stealer salatstealer

Malware Config

Signatures

Family: salatstealer
SalatStealer is a stealer that takes sceenshot written in Golang.
stealer salatstealer

Detect SalatStealer payload 1 IoCs

resource	yara_rule
static1/unpack001/WexSide Crack 2026 Working.exe	family_salatstealer

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/WexSide Crack 2026 Working.exe

File Explorer

WexSide Crack 2026 Working.zip

.zip 2.9MB
WexSide Crack 2026 Working.exe

.exe 7.1MB

WexSide Crack 2026 Working.zip

SHA256 ab607393b5cf92d40de315c78bc1063e6ac992b50634abcf5cd018a196aa9a92
MD5 c938b6dc0ec4f7876f1eeca8e88a9a17
SHA1 b29317524e6514a8a2a10e801c8e87f2de37b1d6
SHA512 25b857abd0e8611c6013650f539829fa5b107db1576bfbd39fe235b9ce9cf67330363975836375ecfea6b70194bc51c1e3b8ac7090da40e769d04b81d31174a5
SSDEEP 49152:2De6dixaGl0VX3dzSu6qhy36RVWKrbVxO8Ey//bxbkE0cNnnyYHp056Pyv0OLg27:60vUdWPDqrlO8d550cNyya6aMYn5+RVU
TLSH
T127E533DCD9B2361790FBEAEBC8730AA472C1E98B2B7BED3759DC9AD0751D40540205B8
MD5 SHA1 SHA512 SSDEEP TLSH

WexSide Crack 2026 Working.exe

IMPHASH 4e2bd2c481372f7ab13b83b63b424e97
SHA256 346fbd171015dd36cc1e8de13e785ab9d07f54bc0d855b6492fd9fcf35d24266
MD5 39b024403795d4ef2be268897bd8a22a
SHA1 1afefb0290598a39b83515dc325c4f6770a115b7
SHA512 4deb3d2c11ea51fbb38425fd1bfd3a4347f2cceab2b0441a232ecc1f6b6ffeecb0cc7e1cd7b863ec77bf7f52299ee10e7d7a854e9070e3be18429566e651fbb6
SSDEEP 49152:LCDq3i3OWk1QZ6jq7u+ltlhQODM1DmQOQkdA/uqboBsFckgC+X0nWi7Vtpm7um6v:LC+rTYQUoPIamHeumvBh8huTiEd
TLSH
T165764917ECA558E9C0ADC13085729563BF717C481B2063D72B60F6287F76BE46EBA384
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Detect SalatStealer payload
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

556480

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

3.2MB

Virtual Size

3.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3.4MB

Virtual Size

3.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

415KB

Virtual Size

32.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

76KB

Virtual Size

75KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

65KB

Virtual Size

65KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

WexSide Crack 2026 Working.zip

WexSide Crack 2026 Working.exe

kernel32

generic