Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.DownLoader45.59549.20406.18699.exe
Resource
win7-20231215-en
General
-
Target
SecuriteInfo.com.Trojan.DownLoader45.59549.20406.18699.exe
-
Size
313KB
-
MD5
c5431ed88227d6f2e201da982db63f38
-
SHA1
9dcf0e8327f61df9641050fa30fa8a75642a2161
-
SHA256
dcd703912d6ff2ccc9739b82f12fb2c861812f53bb2ca9432a99850dd172fa94
-
SHA512
381ec81b6822d09903c3edbdee47c2364f797a9d1f047c896cd85f2fe87ddea10839f67b0ef9d148e9cc756322e14e3f1e57dbded0a0bf53416d8006a59284be
-
SSDEEP
3072:oVZTMYQ0qIN6NtVcOXHK5ULK2NUPj0reyRS6CSfKVu1xgCAWU8fvJqxEm4x1ESuS:YMnt3HP2PPjop/1fvoxEvTE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Trojan.DownLoader45.59549.20406.18699.exe
Files
-
SecuriteInfo.com.Trojan.DownLoader45.59549.20406.18699.exe.exe windows:6 windows x64 arch:x64
a7a19cad0c2c193feb43fc00c1b6b502
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
advapi32
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
EventWrite
EventRegister
EventUnregister
RegCreateKeyExW
RegSetValueExW
kernel32
GetLastError
HeapFree
GetProcessHeap
HeapAlloc
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
GetStartupInfoW
Sleep
LocalFree
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateMutexW
GetTickCount64
VerifyVersionInfoW
VerSetConditionMask
MulDiv
CloseHandle
GetCurrentProcessId
gdi32
Polyline
SetBkColor
CreateSolidBrush
CreatePen
DeleteObject
GetDeviceCaps
CreateFontIndirectW
GetObjectW
CreateCompatibleDC
SelectObject
GdiAlphaBlend
BitBlt
DeleteDC
GetStockObject
GdiSetBatchLimit
SetTextColor
GetTextMetricsW
PatBlt
CreateCompatibleBitmap
SetStretchBltMode
StretchBlt
SetBkMode
user32
IsDlgButtonChecked
CheckRadioButton
EnumDisplaySettingsW
EnumDisplayDevicesW
ChangeDisplaySettingsExW
GetSysColor
CopyImage
LoadBitmapW
DestroyWindow
CreateWindowExW
DrawTextW
CheckDlgButton
MapWindowPoints
FillRect
RedrawWindow
IsCharAlphaNumericW
MessageBoxW
SystemParametersInfoW
SetFocus
SetWindowLongW
GetParent
PostMessageW
EnableWindow
ShowWindow
DialogBoxParamW
KillTimer
SetTimer
EndDialog
SetForegroundWindow
FindWindowW
RegisterClassExW
LoadCursorW
DefWindowProcW
SetWindowTextW
SendMessageW
EndPaint
GetSysColorBrush
FrameRect
BeginPaint
DrawFocusRect
GetWindowLongW
GetFocus
InvalidateRect
SetWindowLongPtrW
SetDlgItemTextW
GetDlgItem
GetClientRect
MapDialogRect
SendDlgItemMessageW
SendMessageTimeoutW
SetWindowPos
PtInRect
GetWindowRect
GetSystemMetrics
GetProcessDefaultLayout
ReleaseDC
LoadStringW
GetDC
GetWindowLongPtrW
TrackMouseEvent
msvcrt
_wtoi
__set_app_type
_fmode
memcpy
__setusermatherr
_amsg_exit
_initterm
memset
_unlock
__dllonexit
_lock
_onexit
??1type_info@@UEAA@XZ
?terminate@@YAXXZ
_commode
_acmdln
exit
_cexit
memcmp
_vsnwprintf
_purecall
free
realloc
wcschr
??0exception@@QEAA@AEBQEBDH@Z
?what@exception@@UEBAPEBDXZ
_ismbblead
_exit
_XcptFilter
__C_specific_handler
__getmainargs
_callnewh
malloc
_CxxThrowException
??0exception@@QEAA@AEBV0@@Z
??1exception@@UEAA@XZ
ntdll
WinSqmAddToStream
WinSqmIncrementDWORD
setupapi
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW
SetupDiOpenDeviceInterfaceW
uxtheme
CloseThemeData
GetThemeSysFont
GetThemeSysColor
GetThemeColor
GetThemeFont
OpenThemeData
IsThemeActive
DrawThemeParentBackground
oleacc
CreateStdAccessibleObject
LresultFromObject
ole32
CoInitializeSecurity
CoUninitialize
CoInitializeEx
CoSetProxyBlanket
StringFromGUID2
CoGetObject
CoCreateInstance
oleaut32
SafeArrayGetLBound
SysAllocString
SysFreeString
SafeArrayGetUBound
SafeArrayGetElement
VariantInit
VariantClear
comctl32
PropertySheetW
ord381
InitCommonControlsEx
dwrite
DWriteCreateFactory
Sections
.text Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 235KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ