Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.Trojan.PSE.RV5K4R.32506.20997.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.Trojan.PSE.RV5K4R.32506.20997.exe
Resource
win10v2004-20231215-en
General
-
Target
SecuriteInfo.com.Win32.Trojan.PSE.RV5K4R.32506.20997.exe
-
Size
1.8MB
-
MD5
6385b1c2b1525e92ea54354dfdd55f43
-
SHA1
6ce436021c27ee19787b9f99fc4208c777f5f93c
-
SHA256
5e075bd1dfda76e79c605b145ffe679ea7c936268942528df176624766b575b7
-
SHA512
5e18b40fe625d0e02ad5435d2d62b06dc666bf8ee4c8b0c25f793453d261ce9ccd7dc66c3a448f6215dc9c9e9dca47b66c4a08a30be6935049f15ac826613ba8
-
SSDEEP
24576:IpsqHJwc7DLFUtxeNTKPVlR4zq7ti4Hw7v8Qr:IpsqHJzJMoN+tlRvdHwb7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Win32.Trojan.PSE.RV5K4R.32506.20997.exe
Files
-
SecuriteInfo.com.Win32.Trojan.PSE.RV5K4R.32506.20997.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 756KB - Virtual size: 756KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 860KB - Virtual size: 860KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ