Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.MSIL.Crypt.25575.3241.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan.MSIL.Crypt.25575.3241.exe
Resource
win10v2004-20230915-en
General
-
Target
SecuriteInfo.com.Trojan.MSIL.Crypt.25575.3241.exe
-
Size
4.7MB
-
MD5
737c3d0998d9424c0e199bc860983d90
-
SHA1
34556314b4f1e264f7d6fc157066de6102e1f3b0
-
SHA256
009872e5b21683527af8fe77f920398924fc34e443537fe97a896f8c26cb466f
-
SHA512
13d69195eb1e87e371a2dc57f169c381bd33a1bdd662378a46a2d21aee9dbb56640a75b48b096c800a7afa2ba4809cc58caba4b35f21030d78936a51ec410fbc
-
SSDEEP
98304:KX4L6BcT07oh1XievAysrRPuGFd/x8fFU6fvsk:a4mYuorLQd/dWUGs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Trojan.MSIL.Crypt.25575.3241.exe
Files
-
SecuriteInfo.com.Trojan.MSIL.Crypt.25575.3241.exe.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 4.7MB - Virtual size: 4.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ