SecuriteInfo[.]com[.]BScope[.]Trojan[.]Downloader[.]4205[.]28189[.]exe

General

Target

SecuriteInfo.com.BScope.Trojan.Downloader.4205.28189.exe
Size

90KB
MD5

f0faab482b2938c31c52b9329c9ae799
SHA1

fab01fdaa9409d0f7cd0576f81f2f2ac3ba7e6fe
SHA256

dc11a335d8c2b86b8ba9eb93d74e5ebd828a733a47c7ee97318c042c3909bb10
SHA512

df8efa07575e1a42f73c9a17821e0b74480c0ac79a11d271dd91bf529c951298f490b4a2c3c36c9a3117f0bbd4386aa6000297a24dad9c58b377b7645b875620
SSDEEP

1536:TFDs1BxdV9VnxVuyYhIVc1nRwqCE5DBK8gyG16qCo3FTbiujaBZHqhc:T2xujhIUR1rZzgFF13iuw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.BScope.Trojan.Downloader.4205.28189.exe

Files

SecuriteInfo.com.BScope.Trojan.Downloader.4205.28189.exe
.exe windows:4 windows x86 arch:x86

ffea2737e178b41e9227614310ee9bbc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleA
GetCommandLineA
GetStartupInfoA
lstrlenA
lstrcpynA
_lopen
SizeofResource
LoadResource
FindResourceA
CopyFileA
FindFirstFileA
CreateDirectoryA
LockResource
_lcreat
_lwrite
_lclose
FreeResource
DeleteFileA
MoveFileA
WritePrivateProfileStringA
WinExec
GetPrivateProfileStringA
lstrcatA
lstrcpyA
LocalAlloc
FindClose
LocalFree

user32

SetFocus
CheckRadioButton
GetWindowTextA
CheckDlgButton
IsDlgButtonChecked
GetDlgItemTextA
SetDlgItemTextA
SendDlgItemMessageA
PostMessageA
GetParent
SendMessageA
SetWindowLongA
GetDlgItem
EnableWindow
FindWindowA
MessageBoxA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyA

comctl32

PropertySheetA

shell32

SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ffea2737e178b41e9227614310ee9bbc

Headers

File Characteristics

Imports

kernel32

user32

advapi32

comctl32

shell32

Sections

.text Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 1KB

.idata Size: 1KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 4B

.rsrc Size: 81KB - Virtual size: 81KB

.text
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 1KB

.idata
Size: 1KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 4B

.rsrc
Size: 81KB - Virtual size: 81KB