SecuriteInfo[.]com[.]Trojan[.]GenericKDZ[.]105649[.]30549[.]11143 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Trojan.GenericKDZ.105649.30549.11143
Size

900KB
MD5

10c8e643bffdae7fdd1e3a6ffd53ed30
SHA1

fbc49b993712372e4134f2331a239424a96f410b
SHA256

4790c68fec1880ca7a2ac0f6726dcefed6f06a87083830ad209b00ab6447eb77
SHA512

15f0510af02afa4b04e2586ac95455a2686c933d36dfc66e975f7227a41cabd81cc9c2d8c4c5a490178db255bf4fad5aaa109e64987c06c27b1a5381c5ee0384
SSDEEP

24576:i0B9GTeyp+EkzfhhQSTu6FoZBDHzl7juWw8XyUvm:FHGaEkLhxWZL75NXRO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.GenericKDZ.105649.30549.11143

Files

SecuriteInfo.com.Trojan.GenericKDZ.105649.30549.11143
.exe windows:6 windows x86 arch:x86

2388fee6ad8ce4f4a35dbaf64e2da01a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

EnumDisplayDevicesA

advapi32

CredEnumerateA

comctl32

PropertySheet

Sections

Size: - Virtual size: 1.3MB

IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 94KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE