SecuriteInfo[.]com[.]Trojan-Spy[.]Agent[.]6504[.]17710[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Trojan-Spy.Agent.6504.17710.exe
Size

13.7MB
MD5

b02eebe4952f275ec87f912a242a7a75
SHA1

14e7117679105c3432871aebdda0c9526911e427
SHA256

5f5b3678e2f303b1ab07e4ac7eb693257113c273a181f42a96ca59077c755987
SHA512

f147f1df50f0febd5bf7302dc98b6d00d3f70eaeec5a44b5223a14b1992795bad9466743447a12647a4407731f8d7da65aacf40cbe7ff21ebec652ffcd677c58
SSDEEP

98304:wa9CzPeL0qXpAU++ukCgQZC3HSt2napOb/11OycxFfHJQh8yCyI54xhuC0Jnb/cz:ozPZ63SCitHg1n6Qua98R/ECbXjOwYG

Score

1^/10

Malware Config

Signatures

Files

SecuriteInfo.com.Trojan-Spy.Agent.6504.17710.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp

Sections

.text
Size: 13.6MB - Virtual size: 13.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 125KB - Virtual size: 5.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.import
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.export
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE