���$����������I/���hFr0�l���fE B����Tj��A��;�~m�!��Kg��%V�� ��dH��nYx�1���f��;��RmfY�p�]���H��j���+z � ]�g�A�x�ܫ:��yY�Z8f�t�*�2����1��/�}ڊ^��t�gCOڰ��rD���mQ���T>*\��&eu���6�.ML�U}٥�jƱ�!ϵ5">�ӿ�#+���؏6�a����Ҿ�W�ԗi�7Q ;��O�SF�N5_49N% a�鋱A��������Ӹ�n�X'��H��ݴ\I�I��i��60��8��lA�7z��ZQBU�TN����QgS�Ji�w����� q�ZƇd%uyd���[�9�����џk�S��$Z����Ft��i�ω�N"K�0zAr^����q����.�u�cG��3�+=}��N%�Y&�%t�9ތ&��p���p����>aR�F�֍��"}���)�I�e��"Q�GB��<��0n�o]�� {wPـ��Tx�ư��}͡�#��[����@Q�~k��쁨[��~�(֬':6��z,��kkr��@���KŔ#���@co�9w���N���c6�0?ߦqP�F@�m�:�[��1� =�I!���G��k�l���z��x���0f��)5��DHfBJ��TB�L�w���X���U���r��G^ˠ���xo4}Mq�� !�6�m������:Z����Ŝ3�v.k��ǜ���!�FC�e����!��M:z^�BZ��}r"Ν�y{r�2�C`b���7���_���_��k���g)�yLD=?�b��]��i�ߵ�dNb��p�G��%�q+u��\ѽ �>CF43���P��A�����H��`C����1(?{!À���䚵�����>mz�Mx+f��gI�\�����I�1=jB����6z��Y]�b�=+���k��j����$�6�0g�#�E��M�u���H}=��A�l�^��@�P��Iv} �Iw�zv��P��;�Ez�iQ����_�~���yG�C'j�������7@���F;$�4*q��p˚���L�?a!Jά��VȤR���py^"�����I���K`aA�R*��#,��8Tϣ�@����E��}�U��N���8͐S,%H�H.\s% ��� ޖF��_d�@�RD�]�.�9<^χ�:xw�5�p�����{�$M��QE|AjBM͟3v;�њ�w��w�4��@�4~Z�B!�p��~^��lDZVV�7P�y�.�̙d�[h��u5u6Zj|p��&R���R_=�3:��J��sE�����^�m7����/�CDRK}�}���L�%%��Uɓ7��H�����v���~D�a������o�stee��F�z_ d�����@D��/�ȋ>i�p�b1'UhP����N�R��♎w����|�hETw�^��8�+���7�@��'2�a�w�+�wkd'e5��~ *�U������vj?��6ؔ@��Wn�P��S,��ڇ�����!�z_1(�q�M�jL?�L�nT�@����-��Wݍ�J�.Ң��k�����y�[�F�*����U���Rvq[҂��-��r�:{�=�]�bN���S} ����7�0z���������/Y��dF���4�@0�|t����?�\��qC��p�x_d�y����g�ڙ�c���b'/n&�:Xs+c����N�z�#���X`'��c?�4"����vj ̎�K҃��t��~*-�1S�� ���e�P�a��l�de�H�c��[�+�����#efOF+�_�����rUݒ����8�ue��X�������/���R� �7RX;arl#�(u��q@�_A�ɞ�Ez�ayc���� ��ɐ���=�4ai�Nh+� ]%z��XtЈ$캻\��Z�4��"@��(���.3���b����%�/����^�)�s����au>I��8�����G�G2wݣ��\r(��j�jȘ�%�)9�Ug�B�|AU�� �����#X}(�%�g���s�$���S�~pZ} ��_����.u��b�ךY�a'Ex�k���)m�;8|�����Y��I�9$����_�?JT������h��� A淔�I�`�J ���2us}��Ԡ�{�����ϱ^�w��4iү|a�0���N��[&��3L��C��9�k��TͣZ����,��\�<� ��jD�Y�fV�� A��'6���qԆ �#r6�.����;�����[���[6 �k�/˛@���F+�](�K�F�����ȶ�<K����(���jI���U�}�G2@�h�')�)�}w���!�ȣ�-��`piϭ@؛���ШD8��B��1±�ARv��s�x].�׃ŗ��4 �]�NJ�5��(ɕ�5h�v���-��_\�����'�1�'���+��.�f6i�\'��=�bT���f�Sm��� B����`���&@H2��;8���^�w�"����/�2�7p�3sN�cR�:���ř���A�� �K �+�vh��F� ���:@-%4����Wg�\;���C9|"�[mDr�z�H�X�C*�Z��؛�R~MՖƴ)��ѢϴΔ�Y�?lq�~|��X���qd�&M3o�P�K�_�Z����X� �Z1��s�=q���]pFv�*�3.���;�9�xu��?�w}b���2�aNF� |�5���{�A��0Ҵ��װ� -I6��??��Uw���u`�ߡ`��f`�,I3}��O��$���J8p���7��ثLaY�ihq0�-8��=�$P�o�R���<7t|w?������]/�iidi�f���HN`S��9B��<�X4ZkX|��ʵ���.KQ�+4���rRj��qU�T 7�gu&~P��|NhFë"B�]��?Ͱ���:x*a�:-X��� 8 {>��C��7Bٿ��U�Ɯ)D����O�l��L���P�v:���40����Wq9+��D;�|��>�YS�%�<d'@��N e��̢�i�lf� T�<[��)���$X�\��43La������h�4zm�#<W|��B�S"��8���LK �5,�����\���-h��%�km�`�ӱ/�2t�^dK{ה�y�g��AF .����L�l�,oC2�"�f���T���Hd�o�`-���(1����k��/{�߸C��F��q�������qo�A�����6 ���K�� {/}~���J!���yP�'p�y��R�Yž����թ>.TT6$�7s��:t%Ũ}\��{1�q==�|���ᴷ<�| �i���[�`�;({}^[-݇e��
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.TrojanX-gen.29663.14829.exe
Resource
win7-20231215-en
General
-
Target
SecuriteInfo.com.Win32.TrojanX-gen.29663.14829.exe
-
Size
2.9MB
-
MD5
fff5667ff795476ba4349568bca1e9ed
-
SHA1
456105435a9e94042929aea5209784a0a95d8327
-
SHA256
a155d022a79c1de510108b2d58984f70678a80c665709538bb64b3411791b2d0
-
SHA512
ac0698d3f2b6fff275676d1f0334a45ba10c14de04ddae1b8490c7935d7613c9385d8b27b8986323d043035c15ebb5292930100e045604425e1da4d370c1d593
-
SSDEEP
49152:b38ElXcJLFGi+0fPp+8m95rRgE4VGk0N9Jq/amHdDABx1aErDKbS:b38EF8pnpy5r6E4nqWCf1aErDD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Win32.TrojanX-gen.29663.14829.exe
Files
-
SecuriteInfo.com.Win32.TrojanX-gen.29663.14829.exe.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 461KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 72KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE