SecuriteInfo[.]com[.]Trojan[.]Loader[.]1550[.]1067[.]2815[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Trojan.Loader.1550.1067.2815.exe
Size

159KB
MD5

d9010a1da517ee7cf8d87723b904ca30
SHA1

e7dee6f1a3fa88caff15ed2102370392c758c11f
SHA256

0df9e7b5b9f04b6395d39634598c5a2c3f1660ed47b076c75b09bc8d9dca4a67
SHA512

f6d6ba11cd97af5dcd7c7d58c883dcd97779e441b1010eba6b59e4d9f0950c7fa17c1ed62a9fcf51754ce2c7b003695caddb4003ef2935f3e619ae87f7c750e8
SSDEEP

3072:uoWNbZwQ4w71EEKWZvSn+xnYmmhSK2gYvGW:udNbqQ4A1LKRnjP2gYvH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.Loader.1550.1067.2815.exe

Files

SecuriteInfo.com.Trojan.Loader.1550.1067.2815.exe
.exe windows:6 windows x86 arch:x86

fba487c173ab7192b3016484153a0474

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrStrIW
StrRChrIA

kernel32

RtlUnwind
SetEndOfFile
CreateFileW
VirtualAlloc
EnumTimeFormatsA
ReadConsoleW
WriteConsoleW
SetStdHandle
LoadLibraryW
LoadLibraryExW
OutputDebugStringW
SetFilePointer
HeapReAlloc
EnumSystemLocalesEx
IsValidLocaleName
LCMapStringEx
GetUserDefaultLocaleName
GetOEMCP
GetACP
IsValidCodePage
GetModuleHandleW
TerminateProcess
GetCurrentProcess
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount64
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetCurrentThreadId
SetLastError
GetProcessHeap
SetFilePointerEx
ReadFile
GetStartupInfoW
InitOnceExecuteOnce
InterlockedIncrement
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
Sleep
EncodePointer
DecodePointer
WideCharToMultiByte
GetLocaleInfoEx
MultiByteToWideChar
GetStringTypeW
GetLastError
HeapFree
RaiseException
GetCommandLineW
InitializeCriticalSectionAndSpinCount
GetCPInfo
HeapAlloc
IsProcessorFeaturePresent
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
HeapSize
IsDebuggerPresent
CloseHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
GetFileType

loadperf

UnloadPerfCounterTextStringsW
UnloadPerfCounterTextStringsA

mapi32

ord164
ord187
ord184
ord26
ord175
ord47
ord188

pdh

PdhMakeCounterPathA

rpcrt4

NdrServerMarshall
NdrUserMarshalUnmarshall
NdrByteCountPointerUnmarshall
I_RpcAllocate
RpcMgmtSetAuthorizationFn
NdrConformantStringBufferSize
IUnknown_QueryInterface_Proxy
CStdStubBuffer_AddRef

shell32

SHGetSpecialFolderPathA
DragQueryFileW
CommandLineToArgvW
SHGetDesktopFolder

ole32

HPALETTE_UserMarshal
OleCreateFromFile

oleaut32

VarI1FromDisp
SafeArrayGetRecordInfo
VarCyRound
VarUI4FromR4

wininet

HttpQueryInfoA
InternetOpenUrlW
InternetSetFilePointer
InternetSetOptionW
HttpOpenRequestA
CommitUrlCacheEntryA
InternetAutodialCallback

Sections

.text
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fba487c173ab7192b3016484153a0474

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

kernel32

loadperf

mapi32

pdh

rpcrt4

shell32

ole32

oleaut32

wininet

Sections

.text Size: 103KB - Virtual size: 103KB

.rdata Size: 26KB - Virtual size: 26KB

.data Size: 13KB - Virtual size: 21KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 14KB - Virtual size: 14KB

.text
Size: 103KB - Virtual size: 103KB

.rdata
Size: 26KB - Virtual size: 26KB

.data
Size: 13KB - Virtual size: 21KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 14KB - Virtual size: 14KB