Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.BScope.Trojan.Zpevdo.12231.13198.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.BScope.Trojan.Zpevdo.12231.13198.exe
Resource
win10v2004-20230220-en
General
-
Target
SecuriteInfo.com.BScope.Trojan.Zpevdo.12231.13198.exe
-
Size
1.1MB
-
MD5
2149070a39b56ba090ef5d7d70643e48
-
SHA1
eed5005eaa54dcd1793e43163c0b6e6da0a647c1
-
SHA256
d7dd0d6e341d92f91bf7ffa7849a0cb308d7c5f70a3b47970ec6060e8740c625
-
SHA512
38d6e616c5e2e919edff2efa774df40574cdaea32ef1022310b43188d98ac554cb4ea1b63432af668f5c2a12ec039f10d92488542437cebbe94c7b159f2f23a9
-
SSDEEP
24576:A571w4XBPIv6VYrrGLrAXDM9YAlWNul2gmH8h3RyG7uCC2:AhRIA06LMXDgWNul3ByG7VC2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.BScope.Trojan.Zpevdo.12231.13198.exe
Files
-
SecuriteInfo.com.BScope.Trojan.Zpevdo.12231.13198.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 799KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 42KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 68KB - Virtual size: 8.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 197KB - Virtual size: 420KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE