SecuriteInfo[.]com[.]Trojan[.]Mods[.]1[.]23576[.]17372[.]dll | Triage

Sharing

General

Target

SecuriteInfo.com.Trojan.Mods.1.23576.17372.dll
Size

8KB
MD5

f0a6b858e457d67c77889834bb655948
SHA1

19af4fe16cc23a8f3cfc08e493454bbf3c1af5e3
SHA256

59e7595049c655b8ec31b6b7c4ae9fcab3b63fdaa402595a5293d2b549b031f8
SHA512

e3bf170a2afa813fe6a2a24b48160b88056c4b0c9ff7a74cce118c8b89add2c47a2dd09867d33c10fa71b3017be9281f52016715a89755aa131b8aa63832e5ba
SSDEEP

192:3LFXpIUK5qKA2wOtN6KcVYwjcUFfxJl6AkJr4RFgcHtB:3XIUvKA27CKcVY2F5SvJrFcH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
SecuriteInfo.com.Trojan.Mods.1.23576.17372.dll

Files

SecuriteInfo.com.Trojan.Mods.1.23576.17372.dll
.dll windows:5 windows x86 arch:x86

bab287abd34888be50035187199a1350

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
WriteFile
Sleep
ReadFile
GetProcAddress
VirtualAlloc
GetModuleFileNameA
GetModuleHandleA
VirtualProtect
CloseHandle
GetTempPathA
CreateThread

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 378B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ