SecuriteInfo[.]com[.]Trojan[.]DownLoader8[.]9269[.]14470[.]16542 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Trojan.DownLoader8.9269.14470.16542
Size

208KB
MD5

6ec2f9fba9552d04a20474792db48a0a
SHA1

95b7ec15175ab4b81008595e40183e49599b97cc
SHA256

a22cd92848ed7196743ee2f7a3276ecef2c4a1c07b2ddc58c96f7a9e63f53fbe
SHA512

838ac0f04a4940e259580997592097be45432341e9589e350325e4eb60c2a64be0d2d07ca43646194b5410ae953ad436d59eb0f6e8f41e67b9d642502b355825
SSDEEP

6144:oV3hd4cqQhNB5+To7AgCUTXJDdsDVwuy:oDd4rcB5+Ts

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.DownLoader8.9269.14470.16542

Files

SecuriteInfo.com.Trojan.DownLoader8.9269.14470.16542
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CPlApplet

Sections

CODE
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 75B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ