SecuriteInfo[.]com[.]Trojan[.]TR[.]Dropper[.]Gen[.]7617[.]5958[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Trojan.TR.Dropper.Gen.7617.5958.exe
Size

24KB
MD5

172b70844bfda1529597ec6008c32d44
SHA1

8387e777f83c83bafa2fab45bff57f93b465b495
SHA256

a0ae8ddb0b2299ce0b66d315f0c2b785cd38226c614b89f34868d30a038e0b1b
SHA512

a0171d14784a19dd3000c94ebd622f53b0f0d8dfe8eaa83a9b1fc5c1b72693cdadb1ad0cf57a75530b3cd627112beb98409f5cf250eae35cafd0b3ee6376a1b9
SSDEEP

192:UeDT/qYWYrUdiWc8BbujS2k3RL4JtQ6UD2xY5:UentEtcUbQSxGUD2+5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.TR.Dropper.Gen.7617.5958.exe

Files

SecuriteInfo.com.Trojan.TR.Dropper.Gen.7617.5958.exe
.exe windows:4 windows x86

2b1320bebbb4e8135c765094266026fb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
ord301
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
ord307
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaI4Var
__vbaStrToAnsi
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeObj

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ