SecuriteInfo[.]com[.]Trojan[.]Heur[.]KT[.]4[.]HIW@a4o7bfI[.]28402[.]31897 | Triage

Sharing

General

Target

[email protected]
Size

2.5MB
MD5

32f373aa00460417f254f86f3751da56
SHA1

f1f99516cbc9687dacd6209997bea19902c6d9ce
SHA256

673d69cff3f0ba97083baab84b4124523c3ea65dd7ded8e30253da0b97e2be04
SHA512

fcd6a5844fe43506693fc07295d54ad9f18bbf82123c6f69b009f532001e40b126b0b734349b03abc0dea2c3aedd2fc7ac6810718c39af27465ab260b962daef
SSDEEP

24576:ssBc7xW5Ancxkc2dBWf1l+XgpVlrfNGW5QOyoWeITLPV0sNXNrR4wKc7I+im4Mye:LARfBWRZrb9ITzVJKeAG9saQjUEeAw9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
[email protected]

Files

[email protected]
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 9KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 255KB - Virtual size: 255KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ