SecuriteInfo[.]com[.]Trojan[.]GenericKDZ[.]105649[.]13827[.]32664 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Trojan.GenericKDZ.105649.13827.32664
Size

900KB
MD5

b7caeb04a5aa03858a2af76a73cde0ce
SHA1

c5419c7d77d028d177c2a45a0efb0341e6e90917
SHA256

67f998459a1afe82a98a482dd5c84bb6c186b72303a3af9be0f6618a3e552d65
SHA512

0dbc36216108477278705b246afe77aaa3f13efe13d51b0ba1b9a6d1540379c734ce6d04223cf0ef9e93d2c43d0569125964785d6293f2e1c99930ed1feef1cc
SSDEEP

24576:VRtVXoQA6WwKp+Dm0REqjTjsm47hJxzStQYO0qlH:VRtFQ4Dm4EyTjwxzS6YA1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.GenericKDZ.105649.13827.32664

Files

SecuriteInfo.com.Trojan.GenericKDZ.105649.13827.32664
.exe windows:6 windows x86 arch:x86

2388fee6ad8ce4f4a35dbaf64e2da01a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

EnumDisplayDevicesA

advapi32

CredEnumerateA

comctl32

PropertySheet

Sections

Size: - Virtual size: 1.3MB

IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 94KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE