SecuriteInfo[.]com[.]W32[.]Trojan[.]ZXYO-4184[.]26911[.]20346[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.W32.Trojan.ZXYO-4184.26911.20346.exe
Size

9KB
MD5

0eabfc389998f1622d8be8159cfbe129
SHA1

df2f6c4ca5325538ab7dbd955cd7816c1b32bddb
SHA256

ca845949026ae8f01ff77e4a7ec9ad216739f9f267d458967f1e96ef2f2e248e
SHA512

e83b1a7d65626b9b7caf7179724717415449c909a46e85fc695634f352772acbe6e0e4ba39cd8ce073d528d0467eb1922eed5c8ae3914a51fa70e790df0fa401
SSDEEP

96:USEmphs6jMMg1UlOCGfMt0/BcoI6kBpLQjD+JatZ4j:LEmVVg19CKJIrp4Ij

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.W32.Trojan.ZXYO-4184.26911.20346.exe

Files

SecuriteInfo.com.W32.Trojan.ZXYO-4184.26911.20346.exe
.exe windows x86

45c117644ece3329398951540e77431b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDlgCtrlID
SendDlgItemMessageA
SetDlgItemTextA
SendMessageA
MessageBoxA
ChildWindowFromPoint
LoadIconA
EndDialog
DialogBoxParamA

kernel32

ExitProcess
GetFileSize
GetLastError
CreateMutexA
CloseHandle
lstrlenA
UnmapViewOfFile
GetModuleHandleA
CreateFileA
CreateFileMappingA
MapViewOfFile

comdlg32

GetOpenFileNameA

gdi32

CreateFontA

shell32

ShellExecuteA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hint
Size: 512B - Virtual size: 78B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE