Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.Win32.Spy.2884.11456.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan.Win32.Spy.2884.11456.exe
Resource
win10v2004-20230220-en
General
-
Target
SecuriteInfo.com.Trojan.Win32.Spy.2884.11456.exe
-
Size
14KB
-
MD5
7fd7b091b7532074f5523448fa99f639
-
SHA1
e98c3f3c8f3f8f48b16715e6013ab29ab2bcfce0
-
SHA256
849da732ecc044104db967ca64dbc3abc0cb6fd33ff141c0509ed561e175f146
-
SHA512
9c5e94397f54519ae38fe636d0244bec0ed63d9348095847b59cc87d103c157b614417679036f563d99a2d6e6a80b4b225a59693d52106c496d8ae360f9f1fa9
-
SSDEEP
96:nPUtk0HspHsF2Yy0No6gbhK6GteXwxal2YhcV9WMsn1xLVmi:nwklyFLy0Ntg+teg1Whb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Trojan.Win32.Spy.2884.11456.exe
Files
-
SecuriteInfo.com.Trojan.Win32.Spy.2884.11456.exe.exe windows x86
5cf49c4ef60713fe1643bcd4f487170e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
DialogBoxParamA
FindWindowA
EnableWindow
LoadIconA
GetSysColor
GetClassInfoExA
SetForegroundWindow
EndDialog
MessageBoxA
RegisterClassA
LoadCursorA
GetSysColorBrush
GetDlgItemTextA
GetDlgItem
wsprintfA
SetWindowTextA
SetDlgItemTextA
SendMessageA
RegisterClassExA
gdi32
SetTextColor
SetBkMode
shell32
ShellExecuteA
kernel32
lstrcatA
WriteFile
LoadLibraryA
VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
SetFilePointer
SetFileAttributesA
GetModuleHandleA
SetEndOfFile
ReadFile
lstrcpyA
GetFileSize
CreateFileA
CloseHandle
comdlg32
GetOpenFileNameA
Sections
CODE Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 289B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE