H!��`���W_�i�T��"���'��4���`9[�/�َ[�������^j���B��UĤgq9/n���4�P���$O���6m�����ee���Z滋��}�_렘��YΗ�^�T�>�2��P���n���Hnhi�������ʚ:jR�j=P�oz��RVG�A��r�ܶӜ{Hn�̷�c�X�Kq���h�~6��y��Pp����p�qadG���������G[�|p@�EOuI�v�Uj�d*u@�9�2�T%$�D��(`J˂�;:Q��'&*c���7�]�up�~u�<�,-� ՟�鞱���6��5C�����abn�3C�j�$\���������W|�� :5f\C�3�T�[!���8T��+˲�����nu��E���� d�=�YM�-�ՀV�-�ٶn����j64`�a����:�Y�4?E�<�w5J����'֓����-���t؊�ѴE��UUuR�@d�~��VR��w��S7��mC�|(Q��M��t.���f�U����`�A|���@`�&H�=?�����=y&~�?�f�kJ�/B8�ڕ\H78۞Gŏ�2x�E�@�e����9J�i�SE>zђ|"������.'�+�I�f*+�G\7�p [ e�Y,�]>b� �k[����^4�ʽ��F�o��8�@�����=DI4��X��l��:An�N����@�t���7VM�O�=g��'aK�]�^�]ږ�k�5˖�d�ɼ3��^�? �h� ��-fx*����t����lG6��D*� ��'�X��"颻����w�Na��4����=�ך�L}����-@o�*����33ܨ�9�s���p3�qA���6��D�nIJL�J���O2't�5�ɨ��BQ��w8�aE�PH������<��CY ͜�1o�i'�����Z�/���9���'>��#B�9n�~����>�ڍ�y̋%@2����{EO2����|�u��(������3-=]��EOk���lv���>Lppk�9�`�n����1l%r�i�0�IoNf$A���4{Rk�G\����������|� ^��h�!�����G��PA�ʬ���o3<�\� [H�$W�~���/:��&�,y����۰H��R��lě�2+�S�l�CS���x2�*:�<8yZ��u%}�u�&1�Ĕ�a$4??0%��+��}�ʉL��O����^�JKj����쮵0�*�0���~!���(��R��yϮ�)��kS�M���s0�M�hh��s����X��=bߋw�;&-��WnQ������He3� ~���E�yD���|/����tW�ꦕ(1<��g���re���ծ��!�!ᙶ�E/����0�x���Ĥ]��ֈ����]^\�ό]| .l�:0T�`_G,U?!l�r�ۉW~M�N�æ��%��B �VQ�4 Jfp�-�Tc�������O�@�D�I��f��k+��N#���1;K��w� �|���đ1Ld3o��(�6b�l>�a��`L��-ӕ;���A;��JvǑHӑ���ՇSF�&��A?ZU�� ��9�ch�\�����c��*�84i�6��%���Z@�B�ɦJ B��� R�l}�P:G�I�����&�[�i*IJjKX���7Y�0 ��OG,.[A+��d;�[��#�.`� 䲖^-�J�\�����%8zU�Y���Y b|6��ҋ�]�m}�n�J&��'��:���9�����wpR/�U1����9J����Mj����=��X��DS�|��$(�K�K��.u��Ƴ��4P����*3 O������4�T;�,>4��D��=��b'�?�1��Y2�$�O�/,p�8;��]�8�Ӳ�\7 I�]�oQ9��{ ��:Zp��\�t.X�����O/�@����%� ՖJeF�˖0���\�z��{G��i4�����~�d���ه�Ѝ��w��>;$k,_6�2�)@*����ʒR��#|��wH��3��ӱ�j/�s7�v5{k^�����9="}�\M�]�I����_������m ^�#��u�\G�?�V<���I%�Q��� ����֮I��ZS'T�Hx���<�}�?�`�`Le���Pv�}�s��O Z�<ᵶO �#JW�>�\��虔+���u`�f-���jL[ʞ�=(��o���&Q�G�������_��[�T����Rb�����zˠ��m'7A�&���v�`���s�̷A��7%��H�'ㅦ[gR�@�����!)��.��Y�̃�x�22W(;� ��1�!�x���<�b��a;�GR�6Z/jdo���{��:�F���2�5���p�_�ܣ��1 �N��*�I_E%�On�����e�bv7��Y ��-�[�%�3^|����1n����ޒ��P��,�_0�W����b��U�(+k`��{��_�ڷ!_rcYH�<�d=�r�2AW� ��U�bj����{�����G2����sԻ~������yZ\ �4������[z�;�ڦ�U�t��OjD��ۀi�\Ƙ�V:�0O�@�0������[��]ᆈ�E������8���9�G���`-m�9p�S�5��O�8t��g��Z=.�&1�0�[�p ԘR �7�p�G��7�ڱ���g�b:��P�G���Y�~��ʠ0�g��{����?ɻ/Z�ֺ�Z�H�Z��q�f������ܞ��[=2�f�b@��mۖ�;O��!�&#ɘi���F�E=K�A{��)��n��8�.�b���H{�e47$�Y&�E�/�4E��X�A7��ê�)宽� ��S{�=��+��P�R�<,��V$}�KG�齚#V\�}��\���%-9�0��Wq5_�RavQ�e}����A7e�8-������~|!���̮�Z�`�ȥj�U��Mׄ��H�L��-���C�[��76R�c.;�"���!� �ʦ5p�;����V� �۾\���}�ic�}k��"ݡD�q��D:����fSj��� �o��1����-��5[j�0cs]��a��YejRDN�n�� ��<
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.TrojanX-gen.6370.exe
Resource
win7-20231215-en
General
-
Target
SecuriteInfo.com.Win32.TrojanX-gen.6370.3894
-
Size
3.0MB
-
MD5
b2f94ce9aaa9c059759890227b5bb6a0
-
SHA1
64f4d45c5db0630c44c3cc05fb2a1d61394aff91
-
SHA256
4d6892357278591e0365c59ea6482d4155a2e3c38814ff868c539a8e9dda5157
-
SHA512
43e5ca7211cd55f8ffb97d4ed636c4e4a846dcbe3b9e2651335e5297f80c4ffebc1ee6e99e52569e6d3f761393f162b4fd4f2d94441d94f50059d322a0d82a8c
-
SSDEEP
49152:ftJ+4uoQJ6UYxBdTd2YDMDlnQ/bslJH3RZNe6s+HwGeIzaEraTgSbB8+DfixYEa5:FIoaYxrTd2YDGFkslpbsAwGjzwgqDfi9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Win32.TrojanX-gen.6370.3894
Files
-
SecuriteInfo.com.Win32.TrojanX-gen.6370.3894.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 461KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 72KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE