Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.TrojanX-gen.5490.3978.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.TrojanX-gen.5490.3978.exe
Resource
win10v2004-20230915-en
General
-
Target
SecuriteInfo.com.Win32.TrojanX-gen.5490.3978.exe
-
Size
871KB
-
MD5
73621af47a6b6943527d85fda07b3bc6
-
SHA1
38b9845b5c9a87ee8bac6e2edaba949270f32d59
-
SHA256
e215e9e90f3aa064ca0df91993ab91f086fe918e72c05de21307b75b1cd164ec
-
SHA512
f9fc9a19265079fb49588d52d8461beb544e19bd26399e9b579e6dbf18d823695e61dfab4b689679976b607b437439b7384d12a7cecfafd3c9451aa460dd93eb
-
SSDEEP
12288:H8hkSMdr3GNUAn9cNNeX8X/iTS46omhsIStxFmcPU/uCjV/08Jmb3zZX1BED3jro:H8PIaxscPsWeqK8fafPO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Win32.TrojanX-gen.5490.3978.exe
Files
-
SecuriteInfo.com.Win32.TrojanX-gen.5490.3978.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 868KB - Virtual size: 867KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ