SecuriteInfo[.]com[.]Trojan[.]Inject4[.]62396[.]26028[.]31908[.]exe

General

Target
SecuriteInfo.com.Trojan.Inject4.62396.26028.31908.exe
Size 1.1MB
Sample231012-zceefsdc44
SHA256 e8c8adcc3b28d2fbf045214df0549ee9f0980954f4406f941c9e450a5f4e9111
MD5 7a1dde0a1448a299b566b0987a893375
SHA1 55da85aaaf0f14dd3289cad416520756b2010565
SHA512 80cfc748a2fa41dbbb94fe8aca96d536733b911c3a31e56ca53ef12dc268ac901a612fa26c234a18c67d0b821259780826e03799a326522a1403f06b54149a8b
SSDEEP 24576:TN4/qx4e1wW/E9L75i5u+y+AViaqnj8/m8ybhtQ:TT4e1wW/ALUkSTnj8/6hK
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.Inject4.62396.26028.31908.exe

File Explorer

SecuriteInfo.com.Trojan.Inject4.62396.26028.31908.exe

.exe 1.1MB

SecuriteInfo.com.Trojan.Inject4.62396.26028.31908.exe

IMPHASH 4c2ede2d1d1824f0fded580996722f5f
SHA256 e8c8adcc3b28d2fbf045214df0549ee9f0980954f4406f941c9e450a5f4e9111
MD5 7a1dde0a1448a299b566b0987a893375
SHA1 55da85aaaf0f14dd3289cad416520756b2010565
SHA512 80cfc748a2fa41dbbb94fe8aca96d536733b911c3a31e56ca53ef12dc268ac901a612fa26c234a18c67d0b821259780826e03799a326522a1403f06b54149a8b
SSDEEP 24576:TN4/qx4e1wW/E9L75i5u+y+AViaqnj8/m8ybhtQ:TT4e1wW/ALUkSTnj8/6hK
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4566

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcAddress CloseHandle WaitForSingleObjectEx Sleep SwitchToThread GetCurrentThreadId GetExitCodeThread GetNativeSystemInfo FormatMessageA EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection QueryPerformanceCounter QueryPerformanceFrequency InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive InitializeConditionVariable WakeConditionVariable WakeAllConditionVariable SleepConditionVariableSRW LocalFree GetLocaleInfoEx EncodePointer DecodePointer MultiByteToWideChar WideCharToMultiByte LCMapStringEx SetFileInformationByHandle GetTempPathW FlsAlloc FlsGetValue FlsSetValue FlsFree InitOnceExecuteOnce SleepConditionVariableCS CreateEventExW CreateSemaphoreExW FlushProcessWriteBuffers GetCurrentProcessorNumber GetSystemTimeAsFileTime GetTickCount64 FreeLibraryWhenCallbackReturns CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork CreateThreadpoolTimer SetThreadpoolTimer WaitForThreadpoolTimerCallbacks CloseThreadpoolTimer CreateThreadpoolWait SetThreadpoolWait CloseThreadpoolWait GetModuleHandleW GetFileInformationByHandleEx CreateSymbolicLinkW GetStringTypeW CompareStringEx GetCPInfo IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess GetCurrentProcessId InitializeSListHead IsDebuggerPresent GetStartupInfoW CreateFileW RaiseException RtlUnwind InterlockedPushEntrySList InterlockedFlushSList GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW CreateThread ExitThread ResumeThread FreeLibraryAndExitThread GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetCommandLineA GetCommandLineW GetCurrentThread HeapFree GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapAlloc SetConsoleCtrlHandler GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc GetTimeZoneInformation OutputDebugStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap HeapSize WriteConsoleW

Sharing