SecuriteInfo[.]com[.]Trojan[.]MulDrop16[.]17485[.]20755[.]6794[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Trojan.MulDrop16.17485.20755.6794.exe
Size

968KB
MD5

cd1a338066dbeb3bd220818d98a0e8d7
SHA1

0474d84d5ce9168a48f5bfaa71bfa32305296a24
SHA256

d28736a0528d88adb5cc8e3967cee9d53b9e33cdef9e0f0d2c7fd13184eeedd4
SHA512

e0299e9337b937e6482b3df4930bcc2d4bd9e930c22413ec3ab9db20fdcc46f10ed072a70ba37ff2661460a92b658a4ffc1133e2102f9abdadd909559546a438
SSDEEP

12288:PaP3LRk5KkFzN1CK3VK+3QT4xqnfTVlACph7Pns5XYozKGCN0mfoNRIF:uL0KkFZQK3Vw4xEUjzKGCXM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.MulDrop16.17485.20755.6794.exe

Files

SecuriteInfo.com.Trojan.MulDrop16.17485.20755.6794.exe
.exe windows x86

89f3cd0838d6cfcf5015f11ee1a5c7ae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

wininet

InternetReadFile

comdlg32

GetSaveFileNameA

Sections

CODE
Size: 651KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 316KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE