SecuriteInfo[.]com[.]Trojan[.]VbCrypt[.]150[.]26922[.]11894[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Trojan.VbCrypt.150.26922.11894.exe
Size

9.7MB
MD5

07c8fd83fc513a37b41f70ba997da763
SHA1

5c7351aa762e00b6f4b25d9d8efa3efac9c5ad2f
SHA256

a925fb68fddf2a54e690e4dd4c18bf67d4303bc23bad1546d3b2385c4fcb58b2
SHA512

3c2a3c4688997bfa1bb86f144c5ccb43d2e797cab0c0923548aa87dbfd46348d239dcecf53f5cb97700014c046de5b2a61703fa8583cd23dbe2ec16b029f3a22
SSDEEP

196608:fUB9Aq8HyCd/rijp5skRUCdWfVnbuAof48fK3m56a9hlcHico:fYGq9k/owk21fhL8f2mD+C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.VbCrypt.150.26922.11894.exe

Files

SecuriteInfo.com.Trojan.VbCrypt.150.26922.11894.exe
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ