SecuriteInfo[.]com[.]Trojan[.]Pitou[.]17[.]22678[.]3176[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Trojan.Pitou.17.22678.3176.exe
Size 421KB
Sample240404-3hpddsde6y
SHA256 91a45c416324ed3a8c184e349214e7c82d6df0df4fe6d06f3c7818c0d322373b
MD5 9185b776b7a981d060b0bb0d7ffed201
SHA1 427982fb520c099e8d2e831ace18294ade871aff
SHA512 cb46ca0c3156dc7b177fdb73869e13b229cbab8918dbb4b61a854765313fc9526aa5d7b944aa4b9acb77717c5ffd8fe955ba4eb48d75e2528ec844bfcf4aa5e8
SSDEEP 12288:zZMh/qXO/ljOBYbPUV7TRnP+vacQlokO+bW:Wh/qXIvbPUFxqaQ2W
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.Pitou.17.22678.3176.exe

File Explorer

SecuriteInfo.com.Trojan.Pitou.17.22678.3176.exe

.exe 421KB

SecuriteInfo.com.Trojan.Pitou.17.22678.3176.exe

IMPHASH 32a31bfad8ca2c4b8a1a523b9cceb9d8
SHA256 91a45c416324ed3a8c184e349214e7c82d6df0df4fe6d06f3c7818c0d322373b
MD5 9185b776b7a981d060b0bb0d7ffed201
SHA1 427982fb520c099e8d2e831ace18294ade871aff
SHA512 cb46ca0c3156dc7b177fdb73869e13b229cbab8918dbb4b61a854765313fc9526aa5d7b944aa4b9acb77717c5ffd8fe955ba4eb48d75e2528ec844bfcf4aa5e8
SSDEEP 12288:zZMh/qXO/ljOBYbPUV7TRnP+vacQlokO+bW:Wh/qXIvbPUFxqaQ2W
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

56800

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\omtnkdoj\bnwv\yogisfk\cqf.pdb

comdlg32

GetOpenFileNameA GetSaveFileNameA

gdi32

BitBlt DeleteDC CreateCompatibleDC GetStockObject SetBkColor SetTextColor SelectObject GetDeviceCaps CreateCompatibleBitmap CreateBitmap TextOutA DeleteObject

kernel32

RtlUnwind SetStdHandle WideCharToMultiByte GetSystemTimeAsFileTime WriteFile GetModuleHandleW LeaveCriticalSection DeleteCriticalSection GetConsoleCP SetConsoleCtrlHandler Sleep GetCurrentThreadId RaiseException GetStdHandle MultiByteToWideChar TerminateProcess GetStringTypeW EnumSystemLocalesW LoadLibraryExW ReadFile OutputDebugStringW GetCPInfo HeapFree GetModuleFileNameW FormatMessageA GetCurrentProcess GetLastError FreeEnvironmentStringsW AreFileApisANSI HeapSize SetUnhandledExceptionFilter GetModuleFileNameA GetConsoleMode GetEnvironmentStringsW FlushFileBuffers IsValidCodePage CreateSemaphoreW IsProcessorFeaturePresent GetACP EnterCriticalSection LCMapStringW FreeLibrary GetProcAddress DecodePointer GetFileType EncodePointer CreateFileW GetProcessHeap GetOEMCP TlsFree CloseHandle GetStartupInfoW SetFilePointerEx HeapAlloc QueryPerformanceCounter IsValidLocale GetModuleHandleExW TlsGetValue GetLocaleInfoW TlsSetValue IsDebuggerPresent CompareStringW InitializeCriticalSectionAndSpinCount GetDateFormatW CreateFileA UnhandledExceptionFilter LoadLibraryW SetPriorityClass InterlockedDecrement WriteConsoleW GetTimeFormatW GetModuleHandleA HeapReAlloc SetLastError GetCurrentProcessId GetCurrentThread GetUserDefaultLCID ExitProcess FatalAppExitA InterlockedExchange InterlockedIncrement TlsAlloc GetCurrentDirectoryA

shell32

ShellExecuteA

user32

GetMessageA InvalidateRect SetDlgItemTextA PostQuitMessage SetCursor PeekMessageA DestroyWindow AdjustWindowRect MessageBoxA LoadImageA GetSystemMenu IsIconic DefWindowProcA LoadStringA RegisterClassExA SetForegroundWindow CloseWindow GetCursorPos ReleaseDC GetSystemMetrics LoadIconA CreateWindowExA ShowCursor SetWindowPos GetCursor SendMessageA RemoveMenu GetDlgItemTextA EndDialog DialogBoxParamA GetDC LoadCursorA DispatchMessageA TranslateMessage WaitMessage

winmm

timeKillEvent PlaySoundA timeSetEvent