SecuriteInfo[.]com[.]Trojan[.]Downloader[.]10142[.]19998[.]exe | Triage

Sharing

General

Target

SecuriteInfo.com.Trojan.Downloader.10142.19998.exe
Size

1.4MB
MD5

05fc705f99f8b9d21bbf9a8dd09980b9
SHA1

392e6562a79ac16921b98e1e36a0a8a872b8d600
SHA256

149598271201886890b3c1ff140b9cf5484f14cfd6ed8b41c2dc3a559f332179
SHA512

45097bc19d9ef3ee88fad7d9b74753f51bd801afaba356920a3b62bbbe1af9de73ffb9c933e37030e8fff7f6f6d050a095dd952c26011dd454b7827c772fe71b
SSDEEP

24576:kQYl7GLVtgr5Pnyvg1RIHGCBaCNz7EWNLeyhf9Ib8CVP3znapFf+:1Zt8wKVLCK6KyhubzVP3zn4J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.Downloader.10142.19998.exe

Files

SecuriteInfo.com.Trojan.Downloader.10142.19998.exe
.exe windows:4 windows x86 arch:x86

6af110f0641a9fcd5c5289b156c524a2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

UpdateWindow

gdi32

GetStockObject

winmm

midiStreamRestart

winspool.drv

DocumentPropertiesA

advapi32

RegCloseKey

shell32

Shell_NotifyIconA

ole32

DoDragDrop

oleaut32

UnRegisterTypeLi

comctl32

ord17

ws2_32

recvfrom

imm32

ImmSetCompositionFontA

comdlg32

GetFileTitleA

Sections

.text
Size: 1.3MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 87KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE