SecuriteInfo[.]com[.]Trojan-Spy[.]Keylogger[.]Snake[.]25575[.]20634[.]exe | Triage

Sharing

General

Target

SecuriteInfo.com.Trojan-Spy.Keylogger.Snake.25575.20634.exe
Size

727KB
MD5

b9e1d3fdcbe54f294af95c5989699218
SHA1

85f777dc894f08a820d0371d136229407f741d1f
SHA256

1e4915f9b29de155af0194fe1aea226b65b45f5a87f99b76ee74a54362b2fc65
SHA512

53314389c8f40e11159e6d663d82809453989d155cc71795dbf585219fd1ec3466e7a2bb9ff5c5600bce1a966c1578fe21ac8c425e929aa2c44ab8891befb33b
SSDEEP

12288:vzSql31HgUS77gKzyPVPQOW3IKU4P8WX0IIMJv7vnHXHWdR:LSqlqvDYr4P8Ejdbn3WdR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan-Spy.Keylogger.Snake.25575.20634.exe

Files

SecuriteInfo.com.Trojan-Spy.Keylogger.Snake.25575.20634.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 725KB - Virtual size: 724KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ