SecuriteInfo[.]com[.]Trojan[.]SuspectCRC[.]15331[.]9645

General

Target

SecuriteInfo.com.Trojan.SuspectCRC.15331.9645
Size

92KB
MD5

256d61079b0f4b16c2367df7fc0e1777
SHA1

e430b0e5d2be9fc53ae5a04f2ad334c5d86be8ff
SHA256

5f27621f850e50a8250c8a56a48b1b2f79b0da99d05e1f80e66a6e047b8d1595
SHA512

757e887f3c6001edbd2706e66ef5936ebb469b48a421b2f12fb87880f554913b4f411bbacb5c684a481bf919cea8edfc69acf6e83f9693d0e237567819ef14e7
SSDEEP

768:JaDEp16SfuT9141+TUhr+LLaMH8V7lYPEHea92klMv9ZU9QZU9:oQp6141+ghr+LLaZJ6PEplMFz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.SuspectCRC.15331.9645

Files

SecuriteInfo.com.Trojan.SuspectCRC.15331.9645
.exe windows x86

73b45c4d9e2861835e8dd499ae219736

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Thread32Next
Thread32First
CreateToolhelp32Snapshot
GetModuleFileNameA
CloseHandle
Module32Next
Module32First
Process32Next
TerminateProcess
OpenProcess
lstrcmpA
Process32First
ExitProcess
GetOEMCP
GetACP
GetStringTypeW
GetStringTypeA
GetSystemInfo
VirtualProtect
GetCPInfo
RtlUnwind
RaiseException
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
HeapFree
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
GetLastError
LCMapStringW
GetProcAddress
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
HeapSize
IsBadReadPtr
IsBadCodePtr
LoadLibraryA
InterlockedExchange
VirtualQuery
GetLocaleInfoA

user32

CharUpperBuffA
EnumWindows
GetClassNameA
GetWindowTextA
GetWindowThreadProcessId
MessageBoxA

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

73b45c4d9e2861835e8dd499ae219736

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 28KB - Virtual size: 25KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 48KB - Virtual size: 47KB

.text
Size: 28KB - Virtual size: 25KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 48KB - Virtual size: 47KB