SecuriteInfo[.]com[.]Backdoor[.]Win32[.]Wdoor[.]11784[.]13107[.]exe | Triage

Sharing

General

Target

SecuriteInfo.com.Backdoor.Win32.Wdoor.11784.13107.exe
Size

10KB
MD5

ecd345ae7eb2c17ca1afd5e63e0465a6
SHA1

d4be9a6b20bab69112f5ca0cd859408b05510301
SHA256

98dc2c312ad9e6a0b5ea2d60681d8fd4e3b64161376ef221a22283e4e43cb3a5
SHA512

fd98de81d75a9dc149a49c5bce06878d5ea8a960e47b5f67b74c9a320da4fd83fa836c90fd27977ef24e8b39a8338ea8a6e6560598ccc3be171562bf2afa3341
SSDEEP

96:5JyuebVGedq/gIr/MMgWbeQa5i3NnD2cnx:5JpeEedq/gIr/QWidED

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Backdoor.Win32.Wdoor.11784.13107.exe

Files

SecuriteInfo.com.Backdoor.Win32.Wdoor.11784.13107.exe
.exe windows x86

09793441569fd6384bc89a32cfe7aa90

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA

user32

LoadBitmapA
SendMessageA
MessageBoxA
GetClientRect
GetDC
GetSysColor
ReleaseDC
GetDlgItem
EndPaint
EndDialog
DialogBoxParamA
BeginPaint
LoadIconA

kernel32

GetFileSize
SetFilePointer
WriteFile
GetCurrentDirectoryA
CloseHandle
CreateFileA
ExitProcess
ReadFile
GetModuleHandleA

gdi32

SelectObject
MoveToEx
LineTo
DeleteObject
CreatePen

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 804B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE