Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan-Dropper.11964.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan-Dropper.11964.exe
Resource
win10v2004-20230220-en
General
-
Target
SecuriteInfo.com.Trojan-Dropper.11964.26768
-
Size
104KB
-
MD5
da94508552302df575e7ad0736c9fb99
-
SHA1
884e09503929a806af0b2787c3640a43bdae6232
-
SHA256
9ebdcc2177985cf7ce1afed7e0f8c288a079b15c358b491b135adb8d8597d78a
-
SHA512
d23f5eeea0d534b0b7991d98331c07e96f2777e137aa0241fd3e04bc86fbebe1f4d8b8ea7d8e928a6737055a5546eca24afe08c9b46669485f74319d320e5fc5
-
SSDEEP
1536:egXyX5+N2KWZzDgKJWHEjRdrEf8iShP+6oA631X+kbSumTu2IMu:egX6+NWzDgKJWkjrrR7hoA6lVLmS2q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Trojan-Dropper.11964.26768
Files
-
SecuriteInfo.com.Trojan-Dropper.11964.26768.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ