Trojan[.]RegFuck[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Trojan.RegFuck.zip
Size

12.0MB
MD5

01a9f729852c7a18de9c25a4efdffcbc
SHA1

6f63331ee2df0975ebac3a0d20bbb40a2b413238
SHA256

71407d97f812791c8e0858a075452752aa1f21745291a5cafb83bc3d7a717bfd
SHA512

0adcc649e7f495028d59bf2b47ca3fd9c5ef3ab18ce91b6cb4a8ca3ae851c67f2f5eb5fe46dc45396c82145340240b6da6e5a5d3263ce69ab477b5b61ffc46e7
SSDEEP

196608:yp5ycAQz+UnvChAN43Asmur4FLke/Uk8cYdi9W5hBsg8461BI6GlO/0tgDsXXVuY:yp5j/z+UvC443MuEVke/U8Wi85hBsg82

Score

1^/10

Malware Config

Signatures

Files

Trojan.RegFuck.zip
.zip

Password: infected
Trojan.RegFuck.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12.1MB - Virtual size: 12.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ