SecuriteInfo[.]com[.]TrojanDropper[.]Agent[.]18225[.]17380[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.TrojanDropper.Agent.18225.17380.exe
Size

1.1MB
MD5

e7f979e4ca88f60cdac587fca52125c8
SHA1

3332b8d9ad15d56c0528f5c03587d6ae841ab9f6
SHA256

c7a55fa02d84ce165456e6edaaa1b1fc3c158a84defaa5ff2a669ac3153e5e29
SHA512

680abea4888f58fa5febd1e9359e0f13fc950692437801bc6c915cb8c1f2f751663b8d804f16b9cc46749449fdc211993d6a05b6d1b4a54b49d933d968971277
SSDEEP

24576:wOksv+KTvFrJvUFk0mylbLegiB/+bJqaK:hRTNtveFlbL1i2bJqaK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.TrojanDropper.Agent.18225.17380.exe

Files

SecuriteInfo.com.TrojanDropper.Agent.18225.17380.exe
.exe windows:4 windows x86 arch:x86

d75ec77e85198f8deaf59ae59f45fb70

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsA

kernel32

ExitProcess
TerminateProcess
GetStartupInfoA
GetCommandLineA
RaiseException
HeapReAlloc
HeapSize
LCMapStringA
LCMapStringW
SetCurrentDirectoryA
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapFree
GetProfileStringA
HeapAlloc
SetFileAttributesA
GetFileAttributesA
FindClose
FindNextFileA
FindFirstFileA
SetLastError
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleFileNameA
lstrlenA
FreeLibrary
GetProcAddress
LoadLibraryA
GetTempPathA
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
CopyFileA
GetSystemDirectoryA
GetWindowsDirectoryA
GetACP
lstrcpynA
GlobalFree
GlobalUnlock
GlobalLock
GetModuleHandleA
lstrcpyA
CloseHandle
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
lstrcmpiA
GlobalGetAtomNameA
GetCurrentThreadId
MultiByteToWideChar
WideCharToMultiByte
GetDriveTypeA
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RtlUnwind
GetTickCount
GetCurrentDirectoryA
SetErrorMode
GetLastError
CreateDirectoryA
CreateFileA
ReadFile
lstrcatA
WriteFile
SetFilePointer
SetEndOfFile
FlushFileBuffers
GetFileSize
GetFileTime
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GlobalFlags
GlobalAlloc
GetCurrentThread
FileTimeToLocalFileTime
FileTimeToSystemTime
MulDiv
lstrcmpA
FormatMessageA
LocalFree
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
UnlockFile
LockFile
GetCurrentProcess
DuplicateHandle
InterlockedIncrement
InterlockedDecrement
GetVersion
DeleteFileA

user32

GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatA
PostThreadMessageA
SetRect
CopyAcceleratorTableA
InflateRect
GetSysColorBrush
GetClassNameA
LoadStringA
MapDialogRect
SetWindowContextHelpId
GetMessageA
ValidateRect
PostQuitMessage
InvalidateRect
GetDesktopWindow
CharNextA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GetDC
ReleaseDC
CharUpperA
GetMenuCheckMarkDimensions
GetMenuState
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
GetSysColor
GetFocus
SetFocus
AdjustWindowRectEx
CopyRect
IsWindowVisible
GetTopWindow
MessageBoxA
IsChild
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetWindowTextLengthA
GetWindowTextA
EnableWindow
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
GetDlgCtrlID
GetKeyState
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetParent
GetWindowLongA
GetDlgItem
IsWindowEnabled
UpdateWindow
SendMessageA
LoadIconA
LoadBitmapA
GetClientRect
IsWindow
LoadCursorA
LoadImageA
PostMessageA
DestroyIcon
AppendMenuA
GetSystemMenu
DrawIcon
GetSystemMetrics
IsIconic
SetCapture
PtInRect
GetWindowRect
ReleaseCapture
GetCapture
SetCursor
ScreenToClient
GetCursorPos
CreateAcceleratorTableA
KillTimer
SetTimer
EnumChildWindows
DestroyAcceleratorTable
TranslateAcceleratorA
DestroyMenu
TrackPopupMenuEx
ModifyMenuA
GetMenuItemID
GetMenuStringA
GetMenuItemCount
GetSubMenu
LoadMenuA
MapWindowPoints
TranslateMessage
PeekMessageA
DispatchMessageA

gdi32

SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
DeleteObject
OffsetViewportOrgEx
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextColor
GetBkColor
GetMapMode
DPtoLP
LPtoDP
SetViewportOrgEx
SetMapMode
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
PatBlt
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
CreateCompatibleDC
BitBlt
GetObjectA
CreateDIBitmap
CreateFontIndirectA
GetTextExtentPointA

comdlg32

GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey

shell32

SHGetFileInfoA
ExtractIconA
ShellExecuteA
SHGetSpecialFolderPathA
SHFileOperationA

comctl32

ImageList_AddMasked
ImageList_ReplaceIcon
ord17
ImageList_Destroy
ImageList_Create

oledlg

ord8

ole32

CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoFreeUnusedLibraries
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
CoInitialize
OleInitialize
OleUninitialize
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
StgOpenStorage
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
StgOpenStorageOnILockBytes

olepro32

ord253

oleaut32

SysAllocStringLen
SysFreeString
SysAllocString
VariantClear
SysStringLen
VariantCopy
VariantChangeType
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SysAllocStringByteLen
VariantTimeToSystemTime

urlmon

CreateURLMoniker

Sections

.text
Size: 240KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 436KB - Virtual size: 434KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d75ec77e85198f8deaf59ae59f45fb70

Headers

File Characteristics

Imports

shlwapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

urlmon

Sections

.text Size: 240KB - Virtual size: 236KB

.rdata Size: 68KB - Virtual size: 67KB

.data Size: 24KB - Virtual size: 37KB

.rsrc Size: 436KB - Virtual size: 434KB

.text
Size: 240KB - Virtual size: 236KB

.rdata
Size: 68KB - Virtual size: 67KB

.data
Size: 24KB - Virtual size: 37KB

.rsrc
Size: 436KB - Virtual size: 434KB