Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan-Downloader.MSIL.Agent.12288.13992.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan-Downloader.MSIL.Agent.12288.13992.exe
Resource
win10v2004-20230703-en
General
-
Target
SecuriteInfo.com.Trojan-Downloader.MSIL.Agent.12288.13992.exe
-
Size
6KB
-
MD5
78562028493b76370d3be4b14980e76b
-
SHA1
ab72cd4f924e7f60fdce365ecf6a7998e4dc8c00
-
SHA256
e59ab89b00fdd780976c39874a1e778811130531a384630358c9a85cfe42fd47
-
SHA512
a046cd93cf57de5001fe4cc82542ef74564d7a5e8dc0a26b6a794dff4136e6440f3c99902b18168859fb33412de280e5d30cf60e247833e7772f66c734085d08
-
SSDEEP
96:zUG+e72KID6OjaduhNelcI5pLzUKFtaem7dYziSfaXVzNt:z6D66YlcI5lUKPm7dYziSfyv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Trojan-Downloader.MSIL.Agent.12288.13992.exe
Files
-
SecuriteInfo.com.Trojan-Downloader.MSIL.Agent.12288.13992.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ