SecuriteInfo[.]com[.]Trojan[.]KillProc2[.]21458[.]18745[.]414[.]exe

General

Target
SecuriteInfo.com.Trojan.KillProc2.21458.18745.414.exe
Size 358KB
Sample230916-hccgesca22
SHA256 658bdee8061c5f57428ff71109a1c54a4a65d959c65e9cfe6ec7bcefaa0d71ed
MD5 d7d792167c66e484b13329d256411f1c
SHA1 394edb1d544ff3df3c05b6d1c1b1d913e17012e9
SHA512 c5394b4c7e2ec12e68edcf5a55ff427c89a547e94b2936f3033983aca007da9687408bc325cffee91b9c00d672a5a045716f16fd1e01ecf3ec640f60913effaf
SSDEEP 6144:Q4jra0nHNkkhzSSWyIBHb4AOxsd/g7Eu6A7L7hqiLeguFB8fi:Q4vfnHy++l4zsd/gQSJSgur8fi
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.KillProc2.21458.18745.414.exe

File Explorer

SecuriteInfo.com.Trojan.KillProc2.21458.18745.414.exe

.exe 358KB

SecuriteInfo.com.Trojan.KillProc2.21458.18745.414.exe

IMPHASH c8144f386a1d9b87b36aea6b6202dfaf
SHA256 658bdee8061c5f57428ff71109a1c54a4a65d959c65e9cfe6ec7bcefaa0d71ed
MD5 d7d792167c66e484b13329d256411f1c
SHA1 394edb1d544ff3df3c05b6d1c1b1d913e17012e9
SHA512 c5394b4c7e2ec12e68edcf5a55ff427c89a547e94b2936f3033983aca007da9687408bc325cffee91b9c00d672a5a045716f16fd1e01ecf3ec640f60913effaf
SSDEEP 6144:Q4jra0nHNkkhzSSWyIBHb4AOxsd/g7Eu6A7L7hqiLeguFB8fi:Q4vfnHy++l4zsd/gQSJSgur8fi
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

39348

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FreeConsole MultiByteToWideChar QueryPerformanceCounter QueryPerformanceFrequency GetStringTypeW WideCharToMultiByte GetCurrentThreadId CloseHandle WaitForSingleObjectEx Sleep GetExitCodeThread InitializeCriticalSectionEx GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetCPInfo IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess GetCurrentProcessId InitializeSListHead IsDebuggerPresent GetStartupInfoW CreateFileW RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType GetFileSizeEx SetFilePointerEx FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap ReadConsoleW HeapSize WriteConsoleW

Sharing