Overview

overview

10

Static

static

10

Trojan-Pro...rt.exe

windows7-x64

10

Trojan-Pro...rt.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Trojan-Proxy.Win32.Qukart.vjh-2f04b58add65e5849d210e44097ef2a6c00532ced06cc553b17a320ffc4b5762

  • Size

    163KB

  • MD5

    43bd52be98f8cc917980011b8e8883bd

  • SHA1

    650faa0fb6e2ded6f29778681859ea9168e4bb33

  • SHA256

    2f04b58add65e5849d210e44097ef2a6c00532ced06cc553b17a320ffc4b5762

  • SHA512

    20d9ad8f1441411020bd538999de1f96c02bf5453b8e2d306287d8dccfe21118c81f2baf87b1843758cdf2f0c4c5042670b3a56495f1ca287c12bd0d17389985

  • SSDEEP

    1536:PhtCbScK7GBwaTrsNnam97lProNVU4qNVUrk/9QbfBr+7GwKrPAsqNVU:NxGBwV397ltOrWKDBr+yJb

Score
10/10

Malware Config

Signatures

  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Trojan-Proxy.Win32.Qukart.vjh-2f04b58add65e5849d210e44097ef2a6c00532ced06cc553b17a320ffc4b5762
    .exe windows:1 windows x86 arch:x86

    c2a87fabf96470db507b2e6b43bd92eb


    Headers

    Imports

    Sections