Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.TrojanX-gen.27173.29057.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.TrojanX-gen.27173.29057.exe
Resource
win10v2004-20231025-en
General
-
Target
SecuriteInfo.com.Win32.TrojanX-gen.27173.29057.exe
-
Size
1.9MB
-
MD5
e09313dbeeeca537bbd4e87b52cbd317
-
SHA1
6af0986c7add0ffe6f5e5ecad51a0b44f7a43a64
-
SHA256
b79cbb56e34e791c0030109f9c0358df8fda6be51d9a038c8d10e532f84cc489
-
SHA512
dc8b0390da866259d975b86312921705ad55ba83e2a4c9d3e567196c25e1aa08067078f7759376f1ef2bc3f91a4523cd87057c4faaa3cc27665f8fd87809c06c
-
SSDEEP
49152:lf5CweNFGSlrry9YkN64NP9JEKFkOqiJWphUNNqeBqTyCW89Y:l5CwePFxy9Yb4NPXRsiJTNqeByy/89
Malware Config
Signatures
-
resource yara_rule sample vmprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Win32.TrojanX-gen.27173.29057.exe
Files
-
SecuriteInfo.com.Win32.TrojanX-gen.27173.29057.exe.exe windows:4 windows x86
f8cf992caff47fb043d8256d71771d0d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
kernel32
WideCharToMultiByte
GetModuleHandleA
GetProcAddress
VirtualProtect
user32
CharNextA
MessageBoxA
gdi32
GetStockObject
winspool.drv
DocumentPropertiesA
comdlg32
GetFileTitleA
advapi32
RegOpenKeyA
shell32
ShellExecuteA
ole32
CoGetClassObject
oleaut32
SafeArrayGetLBound
comctl32
ord17
oledlg
ord8
Sections
.text Size: - Virtual size: 791KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 398KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 120B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ