SecuriteInfo[.]com[.]Win32[.]Trojan[.]PSE[.]15IBL0F[.]4925[.]12680[.]dll | Triage

Sharing

General

Target

SecuriteInfo.com.Win32.Trojan.PSE.15IBL0F.4925.12680.dll
Size

672KB
MD5

09b82fca458f37a75295eb787f2a0e11
SHA1

0b8f81302b93c402f9ac71c0787f1a08af69f903
SHA256

7ece4b63b694cb37af788f492305eddd4a77d04fba50260deba306043640c63b
SHA512

ed84aaaac78ad878d9a3e83d958212c100f9c0fe87c703a405d42f707b793b9727563ebd939334c7e1607ee020458cfca4e4c5b071948f74a5e4ae3486a579e3
SSDEEP

6144:t9gGhOIDALjiOOkG/8iEXdSXp/uLjLSI70i55KQy:t9gpIk7OkG/bEpTx7Vb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
SecuriteInfo.com.Win32.Trojan.PSE.15IBL0F.4925.12680.dll

Files

SecuriteInfo.com.Win32.Trojan.PSE.15IBL0F.4925.12680.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 392KB - Virtual size: 392KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ