SecuriteInfo[.]com[.]Trojan[.]MulDrop25[.]25973[.]30466[.]10337[.]exe | Triage

Sharing

General

Target

SecuriteInfo.com.Trojan.MulDrop25.25973.30466.10337.exe
Size

14KB
MD5

a89f5a781a4d5153ca31ed64ce27b379
SHA1

1a3732ebede98e63d6e95d8634d11728eca61c29
SHA256

edeb7fa25c34426f14f1a4fe13bdcd7b0f3a3d6291e6ca883fe7b9a7503d622d
SHA512

acaaefb81e8c4305cf3c400d0066117208bc3b8266ddc0f05013a1bc6426ca7b8e7132ed6469dd7920fdb4b591ae087a9e79b5af7241a52a9242331f1bed2b74
SSDEEP

384:dQ8wvUmai/zbM/XygkxOu6cyhLWqYv1fdlSW:djkUHi7blHhyhi9R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
SecuriteInfo.com.Trojan.MulDrop25.25973.30466.10337.exe

Files

SecuriteInfo.com.Trojan.MulDrop25.25973.30466.10337.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Boss\Desktop\Laps\Laps\obj\Release\Laps.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ