SecuriteInfo[.]com[.]Trojan[.]Proxy2[.]1847[.]20810[.]29925[.]exe | Triage

Sharing

General

Target

SecuriteInfo.com.Trojan.Proxy2.1847.20810.29925.exe
Size

11.7MB
MD5

7411d35849bb188619c8bd23f2909099
SHA1

bc83fa334fca674ea5bc8fc6f2d5aa7ad5c09c04
SHA256

fe9b2f4c43f93fc621332861e4b8800144cceec5ff330c32f6d0c0dceeb0d9e8
SHA512

fb54a509c5c6d60639a940bf0a33547e064af7eb530dd99f8d9b3ad4185ce02802163445174ae11aebc4f384c246c2afe824ef25b5fa8e553e54cfbe076c2c9e
SSDEEP

12288:XlKYcNbpm2teBRcB3EH96cJzttVFQTko9jNq3UheTjCcuVE831XK/j:YYAm2sB78yjTKko9jk0VE831XK/j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.Proxy2.1847.20810.29925.exe

Files

SecuriteInfo.com.Trojan.Proxy2.1847.20810.29925.exe
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 5.9MB - Virtual size: 5.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 479KB - Virtual size: 728KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 237KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ