SecuriteInfo[.]com[.]Trojan[.]Crypt[.]8226[.]28479 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Trojan.Crypt.8226.28479
Size

255KB
MD5

001f325cfc6eb661fef35a7f0f42af85
SHA1

b51429e4caf711429edd8de02fa5fcccf62060cb
SHA256

f06d68e2cc43d22a83140814998a24956e3471a15b5dcc44cc222c1bda995d1f
SHA512

fcb27b942a7c9c7b02e5b0ca1eeb0e3e1ee165dac4b336d7139eaa6a9bd115e1c398e0c27ecff89277cd475c91a6e3e3579dc6e2e110f3c7901e4dd2ef7f6ccd
SSDEEP

6144:WTHGwliKbvH+zwGnAQPxpkxV4F9vFdEt87L:wPAUHI7J57

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.Crypt.8226.28479

Files

SecuriteInfo.com.Trojan.Crypt.8226.28479
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ