SecuriteInfo[.]com[.]Trojan[.]GenericKDZ[.]105649[.]26510[.]19959[.]exe | Triage

Sharing

General

Target

SecuriteInfo.com.Trojan.GenericKDZ.105649.26510.19959.exe
Size

900KB
MD5

e51a2b1859c4cfd00e7172e24ad39467
SHA1

b43e314fafc1e41ca4cc5b440ddf79e34e8c8107
SHA256

dfb2023f2442a4eb6c97401b8cb2adf08a217c2e57f08d10070a5af3f6197d28
SHA512

b7b58708a0c116f042c632349c3b9978b73c48eb61cc2b59df855e698bcd4eb2a7bda48f7d540a5599a7750128f79c2413f939a30231db98351db8b7e8085f0f
SSDEEP

24576:FzUeyxs/GOmkrxcOGFH1L8a0IkGbT+Vk:FoQGOZxgWhGX+V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.GenericKDZ.105649.26510.19959.exe

Files

SecuriteInfo.com.Trojan.GenericKDZ.105649.26510.19959.exe
.exe windows:6 windows x86 arch:x86

2388fee6ad8ce4f4a35dbaf64e2da01a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

EnumDisplayDevicesA

advapi32

CredEnumerateA

comctl32

PropertySheet

Sections

Size: - Virtual size: 1.3MB

IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 94KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE