SecuriteInfo[.]com[.]Trojan[.]GenericKD[.]71172436[.]18987[.]18586

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Trojan.GenericKD.71172436.18987.18586
Size

1.3MB
MD5

eeeb5842b430d0f77a322f52c126a174
SHA1

060741091bfa93945a2a6b29fa186cd9189bc582
SHA256

bd38204daf6824e9fecb31753a3c5ddb7159e3dd384f6c6533b0a4e8ab0d3d60
SHA512

d998a1e17316c13a62a6557cd0130d5eaaac2e5d68a50f33d21473c8afe5a506acf6c6b059b9f1e87557c79301399d1d27d77e32105ccbdec8b1905fce573d3b
SSDEEP

24576:3Iv18bDk9FdA70jIzqSG326MC/v4KcfLJHh0lhSMXlfVhZ0Fh1Pp:86vk3tkzFG323CoKC9Gtb0F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.GenericKD.71172436.18987.18586

Files

SecuriteInfo.com.Trojan.GenericKD.71172436.18987.18586
.exe windows:6 windows x64 arch:x64

0ce76fc744c0d44ecc0ad83dfe66d8b6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

G:\autostop\4autostop fully\cheat\dll\autostop.pdb

Imports

d3d11

D3D11CreateDeviceAndSwapChain

kernel32

WritePrivateProfileStringW
GetPrivateProfileIntW
GetPrivateProfileStringW
WideCharToMultiByte
GetEnvironmentVariableA
GetUserDefaultLocaleName
Sleep
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
GetLocaleInfoA
LoadLibraryA
QueryPerformanceFrequency
GetProcAddress
FreeLibrary
QueryPerformanceCounter
CreateDirectoryW
GetTempPathW
CreateToolhelp32Snapshot
Process32NextW
Module32FirstW
Module32NextW
WriteConsoleW
HeapSize
HeapReAlloc
SetStdHandle
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
CloseHandle
GetCommandLineW
GetCommandLineA
ReadProcessMemory
GetACP
IsValidCodePage
DeleteFileW
GetTimeZoneInformation
ReadConsoleW
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetFilePointerEx
GetFileSizeEx
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
HeapFree
HeapAlloc
GetStdHandle
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
LoadLibraryExW
TlsFree
TlsSetValue
OpenProcess
K32GetModuleFileNameExW
WriteProcessMemory
MultiByteToWideChar
GetLastError
CreateFileW
PeekNamedPipe
WriteFile
ReadFile
SetEndOfFile
GetModuleFileNameW
lstrlenW
WaitNamedPipeW
GetOEMCP
GetCurrentProcessId
GetEnvironmentStringsW
GetCurrentThreadId
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
GetSystemTimeAsFileTime
InitializeSListHead
TryAcquireSRWLockExclusive
InitializeConditionVariable
WakeConditionVariable
FormatMessageA
GetStringTypeW
LocalFree
GetLocaleInfoEx
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
AreFileApisANSI
GetFileInformationByHandleEx
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
GetCPInfo
RtlUnwindEx
RtlPcToFileHeader
RaiseException

user32

CloseClipboard
mouse_event
GetForegroundWindow
GetAsyncKeyState
GetSystemMetrics
DefWindowProcW
PostQuitMessage
GetKeyState
GetMessageExtraInfo
ScreenToClient
GetCapture
TrackMouseEvent
GetKeyboardLayout
LoadCursorW
SetCapture
SetCursor
IsWindowUnicode
ReleaseCapture
SetCursorPos
GetCursorPos
OpenClipboard
UpdateWindow
EmptyClipboard
GetClipboardData
SetClipboardData
GetWindowRect
DestroyWindow
CreateWindowExW
UnregisterClassW
RegisterClassExW
ShowWindow
DispatchMessageW
ClientToScreen
PeekMessageW
SetLayeredWindowAttributes
TranslateMessage
SetWindowLongW
GetClientRect
GetWindowThreadProcessId

advapi32

RegCloseKey
RegCreateKeyExW
RegSetValueExW

imm32

ImmSetCandidateWindow
ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext

d3dcompiler_47

D3DCompile

dwmapi

DwmExtendFrameIntoClientArea

Sections

.text
Size: 877KB - Virtual size: 876KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 312KB - Virtual size: 311KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 302KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0ce76fc744c0d44ecc0ad83dfe66d8b6

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

d3d11

kernel32

user32

advapi32

imm32

d3dcompiler_47

dwmapi

Sections

.text Size: 877KB - Virtual size: 876KB

.rdata Size: 312KB - Virtual size: 311KB

.data Size: 80KB - Virtual size: 302KB

.pdata Size: 35KB - Virtual size: 34KB

_RDATA Size: 512B - Virtual size: 348B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 877KB - Virtual size: 876KB

.rdata
Size: 312KB - Virtual size: 311KB

.data
Size: 80KB - Virtual size: 302KB

.pdata
Size: 35KB - Virtual size: 34KB

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 4KB - Virtual size: 3KB