Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.Trojan.PSE.1TYMTF4.19433.9287.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.Trojan.PSE.1TYMTF4.19433.9287.exe
Resource
win10v2004-20240508-en
General
-
Target
SecuriteInfo.com.Win32.Trojan.PSE.1TYMTF4.19433.9287.exe
-
Size
1.7MB
-
MD5
d5b5262fc414b5360f4fc7ccc4138e5b
-
SHA1
373f2481116d74fd15d79169e99c19ce8a87c04c
-
SHA256
67eb58e60e31099c49136f1826e2349ecd7c19467811108f04e286765ab07131
-
SHA512
ecc98f15028a6eee2b1d208d94f198c3022350481901e171e9f81eb65c86a4b36c0fded8a5ef2219e2f91a3a48f2e816f5f6e55291cb6ba97302c8deb9d4d140
-
SSDEEP
24576:AMQtym8tyMeyr4xtFkc3cAhJ8JQAhqdBK3IrI+Y0e+ZxMzQ3k05x:ATph68LrIQLA305x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Win32.Trojan.PSE.1TYMTF4.19433.9287.exe
Files
-
SecuriteInfo.com.Win32.Trojan.PSE.1TYMTF4.19433.9287.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1008KB - Virtual size: 1005KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 435KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ