Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.GenericKDZ.101769.5867.exe
Resource
win7-20230712-en
General
-
Target
SecuriteInfo.com.Trojan.GenericKDZ.101769.5867.15380
-
Size
324KB
-
MD5
db87d37e4d62652c15461f7ce9d4e421
-
SHA1
8a3e72212b222e344fcb7c5f45e0e0146c455450
-
SHA256
069c950a32202ddbc87a79ec8b364e0c8da4f2a0a217b2a4500cc05058b0c483
-
SHA512
9418761daa2adddf422b9743ba023328a7ebfdd0e8d2a8ae848d5c51f30cc783e06c43e35ed6939bced52341326a10cbd94ab0192185b04a95539b344b2b6d66
-
SSDEEP
6144:MiU//2mWwYQ9svBIUDbXSpt2g9izux6qcuNJwEM:MV/mwYsgdz9i6Ubp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Trojan.GenericKDZ.101769.5867.15380
Files
-
SecuriteInfo.com.Trojan.GenericKDZ.101769.5867.15380.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 314KB - Virtual size: 314KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ