SecuriteInfo[.]com[.]Trojan-Spy[.]Agent[.]13999[.]24767[.]exe

General

Target
SecuriteInfo.com.Trojan-Spy.Agent.13999.24767.exe
Size 273KB
Sample231007-aygn9sag86
SHA256 2f1b76c93a90c8f8f6464c5b5d73fd7fbcae5ffdea517bd05226e7c80824bd98
MD5 df95396ba8fffdf42752ab8429c0e55e
SHA1 f87f6b108dc03884ddfd30e9c2af6d98c67ce492
SHA512 6d3246ec16efdf8491d93d65fa8f0ec06a33fc1d7ec5ba478c7253d91a79149861489ebbf6fefea06966752f9a7e81b3930f84f5934f4b4edb7c219058f6ca48
SSDEEP 3072:bof7OwtZwRAss1auHPfGMRl5LO65G7YegK8:IfZIAssVvfDR7yeOcK
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan-Spy.Agent.13999.24767.exe

File Explorer

SecuriteInfo.com.Trojan-Spy.Agent.13999.24767.exe

.exe 273KB

SecuriteInfo.com.Trojan-Spy.Agent.13999.24767.exe

IMPHASH 1a1849e713c02631190c15fdd13fe404
SHA256 2f1b76c93a90c8f8f6464c5b5d73fd7fbcae5ffdea517bd05226e7c80824bd98
MD5 df95396ba8fffdf42752ab8429c0e55e
SHA1 f87f6b108dc03884ddfd30e9c2af6d98c67ce492
SHA512 6d3246ec16efdf8491d93d65fa8f0ec06a33fc1d7ec5ba478c7253d91a79149861489ebbf6fefea06966752f9a7e81b3930f84f5934f4b4edb7c219058f6ca48
SSDEEP 3072:bof7OwtZwRAss1auHPfGMRl5LO65G7YegK8:IfZIAssVvfDR7yeOcK
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

19915

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW GetModuleHandleExA GetLocaleInfoA GetConsoleAliasExesA CommConfigDialogA FindResourceW InterlockedDecrement SetDefaultCommConfigW QueryPerformanceCounter GetNamedPipeHandleStateA GetEnvironmentStringsW GetComputerNameW OpenSemaphoreA SetCommBreak CreateHardLinkA FreeEnvironmentStringsA SetTapeParameters FindNextVolumeMountPointA ConvertFiberToThread ReadConsoleW WaitNamedPipeW EnumTimeFormatsA WriteFile EnumTimeFormatsW GetCommandLineA GetDriveTypeA GetEnvironmentStrings FindResourceExA GetConsoleCP LoadLibraryW GetConsoleMode CopyFileW GetCalendarInfoA IsBadCodePtr SetConsoleCP DeleteVolumeMountPointW InterlockedPopEntrySList GetFileAttributesA EnumSystemCodePagesA SetSystemPowerState WriteConsoleInputW GetCompressedFileSizeA GetACP GetVolumePathNameA GetStartupInfoW CreateMailslotW DisconnectNamedPipe GetShortPathNameA GetConsoleAliasesW InterlockedExchange GetLastError IsDBCSLeadByteEx SetLastError ReadConsoleOutputCharacterA PeekConsoleInputW EnumSystemCodePagesW SetComputerNameA FindClose InterlockedExchangeAdd LocalAlloc SetConsoleCtrlHandler RemoveDirectoryW AddAtomA HeapWalk OpenJobObjectW GetPrivateProfileSectionNamesA EnumDateFormatsA GetModuleHandleA FindNextFileW GetStringTypeW VirtualProtect GetShortPathNameW SetCalendarInfoA ReadConsoleInputW GetWindowsDirectoryW FindFirstVolumeW GetVolumeNameForVolumeMountPointW DeleteFileW GetCurrentProcessId AddConsoleAliasA ReadConsoleOutputCharacterW ReadFile WriteConsoleW GetAtomNameW GetTempFileNameW WideCharToMultiByte MoveFileA HeapFree HeapAlloc GetProcAddress GetModuleHandleW ExitProcess DecodePointer HeapReAlloc GetCommandLineW HeapSetInformation RaiseException GetCPInfo InterlockedIncrement GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess IsProcessorFeaturePresent HeapCreate EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection GetModuleFileNameW SetFilePointer CloseHandle FreeEnvironmentStringsW GetTickCount GetSystemTimeAsFileTime LCMapStringW MultiByteToWideChar Sleep RtlUnwind SetStdHandle FlushFileBuffers HeapSize CreateFileW

user32

CharUpperW CharUpperBuffA

gdi32

GetKerningPairsA

Sharing