Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.TrojanX-gen.30150.14087.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.TrojanX-gen.30150.14087.exe
Resource
win10v2004-20240226-en
General
-
Target
SecuriteInfo.com.Win32.TrojanX-gen.30150.14087.exe
-
Size
1.3MB
-
MD5
9b83f4aef17adc5febcbd1c7f787047e
-
SHA1
b19fbf4f4c053d46bb99afbde6fecd7e4e547700
-
SHA256
a6b9b8fa15a63c2c8c89a54dde4f5dffaafd6c5f62c9e05cb21c645f4c7b9c86
-
SHA512
ac8cb32d4050142c57e050b666c65eebe64d5e5ab65884ee8172377761c0daa439c22055810364b967f259db7519705a22b5dececf0c135e94c024bc7dcfe324
-
SSDEEP
12288:OUtF7OEA8ynvlk7Bw7B67BpJFJSJipac/MZBNmXVytYSAOZHxCkMhrIGtfyog7N5:V/AvkeE9jY6/2BeotYSLtxvMhrIGh8b
Malware Config
Signatures
Files
-
SecuriteInfo.com.Win32.TrojanX-gen.30150.14087.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
4d:3d:b4:2c:0f:9d:5d:9f:42:19:f0:39:72:08:fe:03Certificate
IssuerCN=PC-KRYPTOY\\MRNot Before21-06-2023 17:02Not After20-06-2024 23:02SubjectCN=PC-KRYPTOY\\MR20:8a:35:98:88:05:ac:60:c1:8f:73:d3:ff:e8:13:c8:b0:f1:ef:3a:24:48:b5:f9:d2:52:8e:e3:82:2f:53:3eSigner
Actual PE Digest20:8a:35:98:88:05:ac:60:c1:8f:73:d3:ff:e8:13:c8:b0:f1:ef:3a:24:48:b5:f9:d2:52:8e:e3:82:2f:53:3eDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
C:\Sfero\Sfero365\prog\SferoBackup365\obj\Debug\Sfero365.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 131KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ