SecuriteInfo[.]com[.]Virus[.]Win32[.]DelfInject[.][.]887[.]17814 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Virus.Win32.DelfInject..887.17814
Size

963KB
MD5

2c8532f2953be6ed3821453283371371
SHA1

55f1d3584739ed73be771ca86646663a303d4c7d
SHA256

9811bb8cb59546ea8be63da7368895c983b335b775e9c18f29da771358f28c82
SHA512

19b24ee67d67b7ccc2bf38d75e7269d55ad432b81f67b12fed96466e364928a521188454d689d74ee35fa1637210b2b41a43360ca7effdee118fc49523effb8a
SSDEEP

12288:rxK0NfZdA7WOt9Yqbo5uzrqbQvZ+cY7zBG6qaWN3zVT/F/m3bHopUyZMNLO1Gsig:rxnA9YqE5E+cY4iQ/ZmcUw8O1G4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Virus.Win32.DelfInject..887.17814

Files

SecuriteInfo.com.Virus.Win32.DelfInject..887.17814
.exe windows x86

54085709f8e9c65b81d10d71782d25f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

IsEqualGUID

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

comdlg32

GetSaveFileNameA

wsock32

WSACleanup

Sections

CODE
Size: 787KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 175KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE