Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.PackedNET.738.12865.exe
Resource
win7-20230824-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan.PackedNET.738.12865.exe
Resource
win10v2004-20230703-en
General
-
Target
SecuriteInfo.com.Trojan.PackedNET.738.12865.15277
-
Size
752KB
-
MD5
a871653d1283da383728c9d81672d318
-
SHA1
234edf6ef57be9cfd412436e41f339047b684259
-
SHA256
068657feef2b23c1b0889aec2dde7e8535864d32f4145ab9c343a3de3b367483
-
SHA512
28187c4c48ef3bf150831adb847df0cb8571c628dee3c50fa8f2e79206aece43772bc80912271aea03c8468789bfa361f9f77e015f4d91ee6974e44a7d011e9f
-
SSDEEP
12288:TrcwzTWnmGm46SfybifatFu31LlFINAmvN2lWokKn7jeXtTvmjYa5OIemUhRcOJO:TrcvniPbewFYROlsBn7jeXZvmjXOIemQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Trojan.PackedNET.738.12865.15277
Files
-
SecuriteInfo.com.Trojan.PackedNET.738.12865.15277.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 750KB - Virtual size: 749KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ