SecuriteInfo[.]com[.]Trojan[.]Mint[.]Zamg[.]Q[.]13858[.]19794[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Trojan.Mint.Zamg.Q.13858.19794.exe
Size

649KB
MD5

7a679a69c55b70094d917567fdca0404
SHA1

d1ba1e1a30657553e51c02840bb74de039de7337
SHA256

272b6a17a8a58a5e75bfdbf88290b0cabd871d72e9cc1dafc7f38a35776495e5
SHA512

ba2f67c11403837108926dcdf6cb2ba392431b32d0eae54261a203f04a0b3c1b1c6574151388915650a38c2f179c8d6ceba3323ba02e42af6a4b4f430d23807b
SSDEEP

12288:2XsPXqcf00rzOfWwuPDp5rztivzMiNt6jaDElwJZvgB3W3alPMA+5kupuuT:2XsPagRzBwIpHivz/i+iwJZvgBm3GMPW

Score

1^/10

Malware Config

Signatures

Files

SecuriteInfo.com.Trojan.Mint.Zamg.Q.13858.19794.exe
.exe windows x86

79420f1baa63b40963b5cae8cd85925b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rsaenh

CPDecrypt
CPEncrypt
CPCreateHash
CPDeriveKey

kernel32

GetCurrentThreadId
LoadLibraryExW
WriteConsoleW
GetShortPathNameW
SetLastError
HeapReAlloc
VirtualAlloc
OpenFileMappingW
CreateSemaphoreA
LoadLibraryA
CreateThread
OpenMutexA
lstrcmp
FindClose

Sections

.text
Size: 644KB - Virtual size: 643KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ