SecuriteInfo[.]com[.]Trojan[.]DownLoader18[.]23007[.]9391[.]27741[.]exe | Triage

Sharing

General

Target

SecuriteInfo.com.Trojan.DownLoader18.23007.9391.27741.exe
Size

88KB
MD5

c0ad9df20d500d78736e652621d895ea
SHA1

7de5c366f03f252b7560071b5a356a9b14ef821d
SHA256

3abdba3f224cd5e3bccc7965f92f9f8b50fed18d9b152460643c6a002178f520
SHA512

a5a78d9b4b7923758fb0599f864e0a91dae0e76dfa2beeaa901cf9567bce5ae36b9517766f7b138660a4385f69f19bbecdac34ce066dc1f602ec4e7465505c6a
SSDEEP

1536:LD6oVClxqu+eX76KqGCrIr2zjvns07VAe9gh2fG6hUa50QV+pG:LDjClFX76KqGCvnsgmeuh2rhUa6QcpG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.DownLoader18.23007.9391.27741.exe

Files

SecuriteInfo.com.Trojan.DownLoader18.23007.9391.27741.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\HP\Documents\Visual Studio 2012\Projects\WindowsApplication3\WindowsApplication3\obj\Debug\WindowsApplication3.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ