Trickler[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Trickler.exe
Size

307KB
MD5

96f20edd17aa16df4a341ac16128847d
SHA1

8911d62a5eca106be70fb872b1a71c666b2df43b
SHA256

cda916944e86ceabde81900cf2d06573e5a81ffcd44d46d6a72cfbaef4c0bf25
SHA512

3189bfbfdff9a1e774767e265f1889aea203a9ccc53991dda3d9b41a88575db2f08aa9222b9d9bfca8d05ad552b48995f69405406e4f2f92fa9e09869f38d49a
SSDEEP

6144:rqppuGRYx4H712f/SBTpzZA6rXD40b+7TJAsP:rqpNtb1YIp9AI4FAsP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Trickler.exe

Files

Trickler.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

NDltoTPW
Size: - Virtual size: 76KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

tJrdyPER
Size: 177KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE