Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.TrojanX-gen.152.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.TrojanX-gen.152.exe
Resource
win10v2004-20231222-en
General
-
Target
SecuriteInfo.com.Win32.TrojanX-gen.152.28455
-
Size
43KB
-
MD5
8847e810d023fbfe8aa82b777ca2b387
-
SHA1
be800faff2f69e968321c235242a36588177fe9d
-
SHA256
caa1c4e396ac1bad0a0ace29f23ce719dcae3ba4f94a39a0dc38094bc013ff0d
-
SHA512
610e96499e6abc370fd5ffbf2e7cd7ef36b49313abe764e3fa0f9f1edbf8c4bd9ce13dff358a4c84f15f7c7742f5d332df888b512e5acb90f8f377e41a29b8cf
-
SSDEEP
768:6yZPcBKvyJKClTitGSNgxHF2sC95qxXraogBOLrlwNe4plkxPRuBBc:69JKClT3SNaMzCee4HkxPRuB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Win32.TrojanX-gen.152.28455
Files
-
SecuriteInfo.com.Win32.TrojanX-gen.152.28455.exe windows:4 windows x86 arch:x86
ce7a64a73673da94873cb51d20d36404
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegCloseKey
RegCreateKeyExW
RegDeleteValueW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
gdi32
CreateFontW
GetStockObject
SetBkMode
SetTextColor
kernel32
CloseHandle
CreatePipe
CreateProcessW
CreateThread
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetExitCodeProcess
GetFileAttributesW
GetLastError
GetModuleFileNameW
GetModuleHandleW
GetNativeSystemInfo
GetStartupInfoW
GetSystemTimeAsFileTime
GetTickCount
GlobalFree
InitializeCriticalSection
LeaveCriticalSection
MultiByteToWideChar
PeekNamedPipe
QueryPerformanceCounter
ReadFile
SetCurrentDirectoryW
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TerminateThread
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__lconv_init
__p__fmode
__p__wcmdln
__set_app_type
__setusermatherr
__wgetmainargs
__winitenv
_amsg_exit
_cexit
_initterm
_iob
_onexit
abort
calloc
exit
fprintf
free
fwrite
malloc
memcpy
signal
strlen
strncmp
vfprintf
wcscat
wcscmp
wcscpy
wcscpy_s
wcslen
wcsrchr
wcsstr
shell32
CommandLineToArgvW
ShellExecuteW
Shell_NotifyIconW
user32
CheckMenuItem
CreateDialogParamW
DestroyMenu
DestroyWindow
DialogBoxParamW
DispatchMessageW
EndDialog
FindWindowW
GetClassInfoExW
GetClientRect
GetCursorPos
GetDlgItem
GetDlgItemTextW
GetMenu
GetMenuState
GetMessageW
GetSubMenu
GetWindow
GetWindowTextLengthW
IsWindowVisible
LoadAcceleratorsW
LoadIconW
LoadMenuW
LoadStringW
MessageBoxW
PostMessageW
PostQuitMessage
RegisterClassExW
RegisterWindowMessageW
SendMessageW
SetDlgItemTextW
SetForegroundWindow
SetWindowPos
SetWindowTextW
ShowWindow
TrackPopupMenu
TranslateAcceleratorW
TranslateMessage
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 9KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE