SecuriteInfo[.]com[.]Variant[.]Ser[.]Zusy[.]4878[.]18518[.]2249[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Variant.Ser.Zusy.4878.18518.2249.exe
Size

900KB
MD5

9679360eba4f604765dfe5cd52df75ca
SHA1

83c8e38b55ba509086d9b86317dcc316c841e390
SHA256

7f8c9b09b9f800100852f7585fae2f29c9b767b2c57125e58c3840fa6c174740
SHA512

c81b8f9458f5da914b9f8b8538f3e414eb7e01364119d376def7f5a856f31a5a400716716d32eb2147c1fb76b998efd2661441c5c19029c38b934dad12c3f583
SSDEEP

12288:d4ZoaQMCxTogTHbvV0fozdD2Dsc33yZwnbcqR9Pz5yEuWZJhq:d4Zo5H31c330wA29P3ZJhq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Variant.Ser.Zusy.4878.18518.2249.exe

Files

SecuriteInfo.com.Variant.Ser.Zusy.4878.18518.2249.exe
.exe windows:6 windows x86 arch:x86

2388fee6ad8ce4f4a35dbaf64e2da01a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

EnumDisplayDevicesA

advapi32

CredEnumerateA

comctl32

PropertySheet

Sections

Size: - Virtual size: 1.3MB

IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 94KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE