Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.Fakealert.59798.30938.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan.Fakealert.59798.30938.exe
Resource
win10v2004-20231215-en
General
-
Target
SecuriteInfo.com.Trojan.Fakealert.59798.30938.23415
-
Size
401KB
-
MD5
38dbe26818d84ca04295d639f179029c
-
SHA1
f24e9c792c35eb8d0c1c9f3896de5d86d2fd95ff
-
SHA256
9f94daaec163d60c74fff0f0294942525be7b5beaf26199da91e7be86224ceeb
-
SHA512
85c2261fdc84aee4e0bab9ebe72f8e7f0a53c22a1f2676de0c09628a3dbe6ebc9e206effd7a113a8e0e3fdb351656d0ebb87b799184591655778db0754e11163
-
SSDEEP
12288:XxHwajJ1tkL2ukgKfap7UcfzoHa6y0S3XnXmGDtoS:XJJ1NcrEyHXx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Trojan.Fakealert.59798.30938.23415
Files
-
SecuriteInfo.com.Trojan.Fakealert.59798.30938.23415.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 720KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 375KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE