SecuriteInfo[.]com[.]Trojan[.]GenericKD[.]67519017[.]667[.]24984

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Trojan.GenericKD.67519017.667.24984
Size

44KB
MD5

ffe0388207468ba0e3501eba49dcd324
SHA1

dd6055804a34cb90cf9baebee2a153662e74383e
SHA256

5e1d712a2956cb14bfd92d5a591281c463314865c2d5d82c6af7bfae766a07fe
SHA512

be27f49ae1eacd94ebbf2a7183bc22c7a56f0c5b74c5d2c5cf86532c4a366f7421d079a7e79897194e15bf990bc9436cc174a660a030387d12218963b5393205
SSDEEP

768:G9vdn5tiwWLnNG3/UMOSY8HRmj2YbYbXE6zNKYW1j62Ua6WVr:G9YXNoU/Sh4j6kNVr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.GenericKD.67519017.667.24984

Files

SecuriteInfo.com.Trojan.GenericKD.67519017.667.24984
.dll windows x86

56106f71ad6a840266fc985af736ce85

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
CreateThread
VirtualAlloc
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
lstrcatW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStringTypeW
CloseHandle
HeapSize
HeapReAlloc
RtlUnwind
LoadLibraryW
OutputDebugStringW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
LoadLibraryExW
WriteFile
ReadFile
GetFileSize
GetFileAttributesA
CreateFileW
CreateFileA
LCMapStringEx
GetEnvironmentVariableW
LeaveCriticalSection
EnterCriticalSection
IsProcessorFeaturePresent
IsDebuggerPresent
GetLastError
HeapFree
HeapAlloc
GetCommandLineA
GetCurrentThreadId
GetProcessHeap
EncodePointer
DecodePointer
InterlockedDecrement
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
GetStdHandle
GetModuleFileNameW
SetLastError
InterlockedIncrement
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InitOnceExecuteOnce
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount64
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentProcess
TerminateProcess
GetModuleHandleW
Sleep
WriteConsoleW

user32

CopyImage
ModifyMenuW
RegisterClipboardFormatW
AnimateWindow
GetInputState
PostMessageW

shell32

ShellAboutA
SHGetDataFromIDListW
SHGetDiskFreeSpaceA

msacm32

acmFilterChooseA
acmDriverPriority
acmDriverEnum
acmFormatTagEnumA
acmStreamReset

setupapi

SetupDiGetClassImageListExW
SetupDiGetDriverInfoDetailA
SetupGetInfInformationW
SetupQueueDefaultCopyA
SetupQuerySpaceRequiredOnDriveA
SetupDiGetClassDevPropertySheetsW
SetupDiGetClassDescriptionExA

comdlg32

GetOpenFileNameW
PrintDlgA
FindTextA
PageSetupDlgA
ChooseFontW
ReplaceTextA
ChooseColorA

urlmon

GetClassFileOrMime
ObtainUserAgentString
HlinkNavigateString
RevokeBindStatusCallback
URLOpenBlockingStreamA
CreateAsyncBindCtxEx

Exports

Exports

HvDeclY
_FileExcists@4
_ReaddFileContents@12
_WrigteToFile@12

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

56106f71ad6a840266fc985af736ce85

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

msacm32

setupapi

comdlg32

urlmon

Exports

Exports

Sections

.text Size: 25KB - Virtual size: 24KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 3KB - Virtual size: 10KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 25KB - Virtual size: 24KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 3KB - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 3KB - Virtual size: 3KB