SecuriteInfo[.]com[.]BehavesLike[.]Win64[.]Trojan[.]jh[.]2508[.]30850

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.BehavesLike.Win64.Trojan.jh.2508.30850
Size 669KB
Sample220607-cy53zaech7
SHA256 90ee0707d0b20c178a63fa8c10b7398254bb38bf66c8d6f479e85d1118ad4ccf
MD5 183a025b1dbee83ed78bf049ad873e01
SHA1 399907bbed4cd3b3ee32d89cb7e8120053a76373
SHA512 3be3f9f058257db4ca3719fe7da416e91ffa7d758086393bb5693d5b59a6ae78be47f336cd6c05395de30de2e9a127ff66dfdd2c23f0c8a75ac32ddb656917a8
SSDEEP 12288:6UcciV7ro5U9aFEl2KkrFN8ME47bVGrVsyuorN/qYw3E0Hv02YM2befmjF8swJkd:6UccigU9aFzEWISyuoZSxPJYfbef9kU2
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

SecuriteInfo.com.BehavesLike.Win64.Trojan.jh.2508.30850

.dll 669KB

SecuriteInfo.com.BehavesLike.Win64.Trojan.jh.2508.30850

IMPHASH 7535524f0f3e94816fd9af5cd48f1e15
SHA256 90ee0707d0b20c178a63fa8c10b7398254bb38bf66c8d6f479e85d1118ad4ccf
MD5 183a025b1dbee83ed78bf049ad873e01
SHA1 399907bbed4cd3b3ee32d89cb7e8120053a76373
SHA512 3be3f9f058257db4ca3719fe7da416e91ffa7d758086393bb5693d5b59a6ae78be47f336cd6c05395de30de2e9a127ff66dfdd2c23f0c8a75ac32ddb656917a8
SSDEEP 12288:6UcciV7ro5U9aFEl2KkrFN8ME47bVGrVsyuorN/qYw3E0Hv02YM2befmjF8swJkd:6UccigU9aFzEWISyuoZSxPJYfbef9kU2
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

4800

Magic Number

523

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

RegCloseKey RegEnumKeyExA RegEnumValueA RegOpenKeyExA RegQueryInfoKeyA

kernel32

AddVectoredExceptionHandler CloseHandle CreateDirectoryA CreateFileA CreateFileW DeleteFileA EnterCriticalSection ExitProcess FreeEnvironmentStringsA GetACP GetCPInfo GetCurrentProcessId GetCurrentThreadId GetDateFormatA GetEnvironmentStrings GetFileAttributesA GetFileAttributesW GetFileSize GetFileType GetLastError GetLocalTime GetLocaleInfoA GetModuleFileNameA GetModuleHandleA GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoA GetStdHandle GetStringTypeA GetStringTypeW GetSystemDefaultLangID GetSystemInfo GetTickCount GetTimeZoneInformation GetUserDefaultLCID GetVersion HeapAlloc HeapCreate HeapDestroy HeapFree IsDBCSLeadByteEx IsDebuggerPresent IsValidLocale LCMapStringA LeaveCriticalSection LoadLibraryA LocalFileTimeToFileTime MultiByteToWideChar RaiseException ReadFile RemoveDirectoryA RemoveVectoredExceptionHandler RtlCaptureContext SetConsoleCtrlHandler SetEndOfFile SetFilePointer SetFileTime SetHandleCount SetLastError SetThreadLocale SystemTimeToFileTime TlsAlloc TlsFree TlsGetValue TlsSetValue VirtualAlloc VirtualFree VirtualQuery WideCharToMultiByte WriteFile RtlRestoreContext RtlUnwindEx

user32

DialogBoxParamA EndDialog EnumThreadWindows GetDlgItem LoadCursorA LoadStringA MessageBoxA PostMessageA SendMessageA SetCursor SetDlgItemInt SetDlgItemTextA wsprintfA

ole32

CoLoadLibrary CoTaskMemAlloc CoTaskMemFree

Name

.text

Size

310KB

Virtual Size

310KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rodata

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

55KB

Virtual Size

130KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

23KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.edata

Size

512B

Virtual Size

142B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

162KB

Virtual Size

162KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ