SecuriteInfo[.]com[.]Trojan[.]DownLoader7[.]3206[.]5477[.]4462[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Trojan.DownLoader7.3206.5477.4462.exe
Size

592KB
MD5

b1c3705347a775ec35da99a2e9d70aab
SHA1

cf8050acad3fc2ca49f389729ba62dccbf11a792
SHA256

0f1aa89d372529f7c3e2a3cb6c8fe93994f2117678a35a574a827e7fc37cdd87
SHA512

4c8dfcdd4311c7559a60a2118550d2fd336fe67f6db1319f2eabf9bc14ff04b763e56cbf49b34b117eb5c0646f01fd433aa1b88b9b59eab012b92d200c182a0b
SSDEEP

6144:aoyoMGGGGGGGGGGbGGGGGGGGGG6GG/DGXxeXJE85PmWyVcjUkdHbIIActoMGGGGe:aKHjlRNKHjl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.DownLoader7.3206.5477.4462.exe

Files

SecuriteInfo.com.Trojan.DownLoader7.3206.5477.4462.exe
.exe windows x86

d8a41e8c9a81d04ec24d53eeda94a55c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord595
ord631
EVENT_SINK_AddRef
ord527
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord531
ProcCallEngine
ord537
ord645
ord572
ord576
ord100

Sections

.text
Size: 296KB - Virtual size: 295KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 292KB - Virtual size: 289KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ