SecuriteInfo[.]com[.]Trojan[.]MulDrop20[.]25563[.]30505[.]7006[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Trojan.MulDrop20.25563.30505.7006.exe
Size

9.5MB
MD5

d103ced7d8157bad7ef2d38f9c477f7b
SHA1

5e10b13a75ff2a5733ca508ca9dfc99b43e81f50
SHA256

d678623c64c737fd9c8372c8e67b9fcc536845c358626065fa92e40f5fe6c6c8
SHA512

b2eb1b53743b6955b862f0d1c02281966fd5b1a30e4a2948e59e2236d3ba3e3b43e98b8c58b22faf7540d705d0e651a152b1d6182a411d42a3240183d8839446
SSDEEP

98304:e2bHRvhbxf+dm0Umts8T8rek3RBzjYz067yqu/mnFQOi33nFbO4KSgPTPgS8NAva:e21V9h2PRW2gNvNS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.MulDrop20.25563.30505.7006.exe

Files

SecuriteInfo.com.Trojan.MulDrop20.25563.30505.7006.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9.5MB - Virtual size: 9.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ