SecuriteInfo[.]com[.]Trojan[.]Inject4[.]62398[.]5534[.]14818[.]exe

General

Target
SecuriteInfo.com.Trojan.Inject4.62398.5534.14818.exe
Size 1.1MB
Sample231012-v5e48sed4y
SHA256 ba1648933cb94d563e207bc59c404a2e062d24db983255a79394c842f15ca8c7
MD5 92ac0a8915999db3a9659bc4090027f1
SHA1 a2ae7d25e9c5765a2d3e42b964222f573ab6783c
SHA512 fd3cb917fccbf87b5dc80c6ef73e8eaea55e8649eb710581a892e89e09d0e880e86b22628de0515de24e785e326119d49d15e6b3310084ac40d3ddeafca032bf
SSDEEP 12288:gtGj4/qM7PFNwvExgVExchiZXJIOY1+gXcpuHotzO9IUHNtazHUdXY0m0:WW4/qM7PFNwcRd7tY1WimH2XT
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.Inject4.62398.5534.14818.exe

File Explorer

SecuriteInfo.com.Trojan.Inject4.62398.5534.14818.exe

.exe 1.1MB

SecuriteInfo.com.Trojan.Inject4.62398.5534.14818.exe

IMPHASH 4c2ede2d1d1824f0fded580996722f5f
SHA256 ba1648933cb94d563e207bc59c404a2e062d24db983255a79394c842f15ca8c7
MD5 92ac0a8915999db3a9659bc4090027f1
SHA1 a2ae7d25e9c5765a2d3e42b964222f573ab6783c
SHA512 fd3cb917fccbf87b5dc80c6ef73e8eaea55e8649eb710581a892e89e09d0e880e86b22628de0515de24e785e326119d49d15e6b3310084ac40d3ddeafca032bf
SSDEEP 12288:gtGj4/qM7PFNwvExgVExchiZXJIOY1+gXcpuHotzO9IUHNtazHUdXY0m0:WW4/qM7PFNwcRd7tY1WimH2XT
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4566

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcAddress CloseHandle WaitForSingleObjectEx Sleep SwitchToThread GetCurrentThreadId GetExitCodeThread GetNativeSystemInfo FormatMessageA EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection QueryPerformanceCounter QueryPerformanceFrequency InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive InitializeConditionVariable WakeConditionVariable WakeAllConditionVariable SleepConditionVariableSRW LocalFree GetLocaleInfoEx EncodePointer DecodePointer MultiByteToWideChar WideCharToMultiByte LCMapStringEx SetFileInformationByHandle GetTempPathW FlsAlloc FlsGetValue FlsSetValue FlsFree InitOnceExecuteOnce SleepConditionVariableCS CreateEventExW CreateSemaphoreExW FlushProcessWriteBuffers GetCurrentProcessorNumber GetSystemTimeAsFileTime GetTickCount64 FreeLibraryWhenCallbackReturns CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork CreateThreadpoolTimer SetThreadpoolTimer WaitForThreadpoolTimerCallbacks CloseThreadpoolTimer CreateThreadpoolWait SetThreadpoolWait CloseThreadpoolWait GetModuleHandleW GetFileInformationByHandleEx CreateSymbolicLinkW GetStringTypeW CompareStringEx GetCPInfo IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess GetCurrentProcessId InitializeSListHead IsDebuggerPresent GetStartupInfoW CreateFileW RaiseException RtlUnwind InterlockedPushEntrySList InterlockedFlushSList GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW CreateThread ExitThread ResumeThread FreeLibraryAndExitThread GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetCommandLineA GetCommandLineW GetCurrentThread HeapFree GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapAlloc SetConsoleCtrlHandler GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc GetTimeZoneInformation OutputDebugStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap HeapSize WriteConsoleW

Sharing