SecuriteInfo[.]com[.]W32[.]Trojan[.]VORE-2106[.]1542[.]exe | Triage

Sharing

General

Target

SecuriteInfo.com.W32.Trojan.VORE-2106.1542.exe
Size

1.0MB
MD5

ebc09e43954886dee2a034fa9a04f3e6
SHA1

998d4e00295d31cc73fb18f04d263f29ffba70a5
SHA256

30e9e1400490475e50b3c0d2078a6082e1ac1302c502083de18e6f9c6fbff4a7
SHA512

34199dc163c15565967535d294212c9fe4b9f2d3d944ff884f73e133a2e8c745fcf90ef51c6429d011a0547bd941975fbf29bcb97e081eb06f7a27d3321de4c1
SSDEEP

12288:Fo3WppP+GvQE35vE99HkfNULsAYh7IO17SPXjHzZ:Fo3WnvQMNUQIO17wh

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

SecuriteInfo.com.W32.Trojan.VORE-2106.1542.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 560KB - Virtual size: 560KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 212KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ