Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.GenericKD.30830478.29112.15554.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan.GenericKD.30830478.29112.15554.exe
Resource
win10v2004-20230220-en
General
-
Target
SecuriteInfo.com.Trojan.GenericKD.30830478.29112.15554.exe
-
Size
34KB
-
MD5
6d4f6e9108431a0dae71d19c5f4f50f9
-
SHA1
573f37b19f85496b37098ddb4973f52e9cec5367
-
SHA256
acbc21dbe1a090520a6d873d8f849d589605a4b56997a0a20836d2ef7d3a4471
-
SHA512
9d5ce1b057dec8bd563272907882be28220922c710737b706eeaba8e8e2df83bde43fd377b1777b7b194381fb814c39a5aafd0f623cf81a63e647f971c862557
-
SSDEEP
768:8JIHNDNTLIo7xVRE80ceWuCiYUTKY1h9Bw0iPCwASwxOha5O:WID9UCrjeqiYUOY1vRiKwpL
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Trojan.GenericKD.30830478.29112.15554.exe
Files
-
SecuriteInfo.com.Trojan.GenericKD.30830478.29112.15554.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 27KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE