SecuriteInfo[.]com[.]Trojan[.]GenericKD[.]69063366[.]26782[.]22956[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Trojan.GenericKD.69063366.26782.22956.exe
Size

4.1MB
MD5

4f6efdf3719d6101f9c08f01f5d1bd57
SHA1

31723d8cd3d80f23f574c4370c688df891718653
SHA256

656bb3b4a18c40d3e431c5f24cf712539a4880631053521413cf46fae7e62686
SHA512

dc09739e04bdd82cff7bb12bc16759806820165af1541ca8fcdca707b765c49113dc2dac9e68bed479457c55c631de5548fc393636509a17b7fe5556914dda30
SSDEEP

98304:4uW2HbA6WrHDvQZfuMquT8xYxliMdQjIypljr+iX3oNw:vW2H8ZjcllqgB9ijIUl3JMw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.GenericKD.69063366.26782.22956.exe

Files

SecuriteInfo.com.Trojan.GenericKD.69063366.26782.22956.exe
.exe windows:5 windows x86 arch:x86

a18c466a89c034cf01801b0439542035

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueA

mpr

WNetGetConnectionA

ole32

CreateStreamOnHGlobal

comctl32

_TrackMouseEvent

shell32

ShellExecuteA

comdlg32

GetOpenFileNameA

wsock32

WSACleanup

gdiplus

GdipSetStringFormatLineAlign

Sections

.text
Size: 2.7MB - Virtual size: 6.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE