SecuriteInfo[.]com[.]Trojan[.]DownloaderNET[.]345[.]23488[.]23453[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

SecuriteInfo.com.Trojan.DownloaderNET.345.23488.23453.exe
Size

156KB
MD5

0de35e232c585438a87c563cb13c4ec5
SHA1

e2dbb9bba04f64dde832e85d4466018fa36e1d08
SHA256

d855efc2e9bd0f59beeae00942f616c34a332edf9888f5a92d0b95bce37cc25f
SHA512

ed15ed4614e1421404188e0cc84a08db96812c59ad41d9a7f7cd3586b92959d048a3a71040ac1960cdf62652846e7ad2316dd9c8129d4ccd389a9088536ef92d
SSDEEP

3072:YYF4uzsugBdatnJLxgzufBY3eixnD+68QaimUtzZ7mwHm:YYF4i9gBktn1IYYOEDisG

Score

N/A

Malware Config

Signatures

Files

SecuriteInfo.com.Trojan.DownloaderNET.345.23488.23453.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:02:9b:13:02:82:8f:f3:90:4e:d2:00:00:00:00:02:9b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

27-01-2022 19:36

Not After

26-01-2023 19:36

Subject

CN=Skype Software Sarl,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2e:d1:8b:5d:16:ac:c1:2b:fc:c5:d9:6b:4e:ee:53:7e:9b:44:65:91:e4:7c:bc:82:90:07:a7:45:f3:ba:eb:ff
Signer

Actual PE Digest

2e:d1:8b:5d:16:ac:c1:2b:fc:c5:d9:6b:4e:ee:53:7e:9b:44:65:91:e4:7c:bc:82:90:07:a7:45:f3:ba:eb:ff

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Skype Software Sarl,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15-09-2022 14:52
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:02:9b:13:02:82:8f:f3:90:4e:d2:00:00:00:00:02:9bCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

2e:d1:8b:5d:16:ac:c1:2b:fc:c5:d9:6b:4e:ee:53:7e:9b:44:65:91:e4:7c:bc:82:90:07:a7:45:f3:ba:eb:ffSigner

Signature Validations

Verification

15-09-2022 14:52 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 45KB - Virtual size: 45KB

.sdata Size: 98KB - Virtual size: 98KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:02:9b:13:02:82:8f:f3:90:4e:d2:00:00:00:00:02:9b
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

2e:d1:8b:5d:16:ac:c1:2b:fc:c5:d9:6b:4e:ee:53:7e:9b:44:65:91:e4:7c:bc:82:90:07:a7:45:f3:ba:eb:ff
Signer

15-09-2022 14:52
Valid: false

.text
Size: 45KB - Virtual size: 45KB

.sdata
Size: 98KB - Virtual size: 98KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B