Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan-Dropper.Agent.6279.14139.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan-Dropper.Agent.6279.14139.exe
Resource
win10v2004-20240709-en
General
-
Target
SecuriteInfo.com.Trojan-Dropper.Agent.6279.14139.exe
-
Size
224KB
-
MD5
8db521c4e5bfc70c6f13ba23612bc07d
-
SHA1
9c4b4c926b6145b59d6bd9a7261451222c5e3795
-
SHA256
fe95e04e35fd4b8583c10caed5af485d6d72115736e6af9237fe15b1846f89fc
-
SHA512
927f83899d09d701bce5c0ddba56815abd80b124c47482aa2ee19159c44edc14bc782d7a89a8e6a5ba520055dec966eb1e3e15ee5301961a61c8c8926fab881b
-
SSDEEP
3072:p0BwHVIMcnibhWILjwoUY+eqP7Jvs/IB3lBEKdbXAoyKz8UAHj7:p0SIxnchDLUoUYZUYMBEaP8jD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Trojan-Dropper.Agent.6279.14139.exe
Files
-
SecuriteInfo.com.Trojan-Dropper.Agent.6279.14139.exe.exe windows:4 windows x86 arch:x86
1d29ccacdb5fc1a2afc11c2ce70667b7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
sndPlaySoundA
kernel32
RaiseException
HeapReAlloc
HeapSize
HeapAlloc
GetACP
GetTimeZoneInformation
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapFree
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
TerminateProcess
GetEnvironmentStringsW
GetEnvironmentStrings
HeapCreate
GetVolumeInformationA
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetStartupInfoA
GetTickCount
GetModuleFileNameA
CloseHandle
ReadFile
GetFileSize
CreateFileA
LockResource
LoadResource
GetCurrentThread
GetCurrentThreadId
WritePrivateProfileStringA
GetPrivateProfileIntA
WinExec
GetLocalTime
GetProfileStringA
ExitProcess
GetCommandLineA
FileTimeToSystemTime
RtlUnwind
FileTimeToLocalFileTime
SetErrorMode
GetFileTime
GetOEMCP
GetFileAttributesA
GetCPInfo
GetProcessVersion
LocalReAlloc
GlobalFlags
TlsGetValue
GlobalReAlloc
TlsSetValue
EnterCriticalSection
GlobalHandle
LeaveCriticalSection
TlsFree
InitializeCriticalSection
DeleteCriticalSection
TlsAlloc
LocalFree
LocalAlloc
GetFullPathNameA
GetStringTypeW
FindClose
FindFirstFileA
SetFilePointer
FindResourceA
SetEndOfFile
SizeofResource
UnlockFile
LockFile
FlushFileBuffers
WriteFile
GetCurrentProcess
DuplicateHandle
GetLastError
MulDiv
SetLastError
lstrcpynA
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
GetProcAddress
GlobalUnlock
GlobalFree
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
IsBadReadPtr
IsBadCodePtr
SetUnhandledExceptionFilter
GetStringTypeA
user32
LoadIconA
IsDialogMessageA
SetWindowTextA
ShowWindow
wvsprintfA
ReleaseDC
GetDC
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
ReleaseCapture
GetDesktopWindow
DestroyMenu
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
CharUpperA
PtInRect
LoadCursorA
GetSysColorBrush
LoadStringA
InflateRect
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetClientRect
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
GetTopWindow
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
MapWindowPoints
SendDlgItemMessageA
GetWindowTextLengthA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
SetForegroundWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
SetActiveWindow
IsWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
UnhookWindowsHookEx
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
PeekMessageA
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
SetCursor
ShowOwnedPopups
PostQuitMessage
GetWindowTextA
CreatePopupMenu
AppendMenuA
EnableMenuItem
CheckMenuItem
SetWindowRgn
GetCursorPos
ScreenToClient
GetForegroundWindow
FindWindowA
GetWindowRect
GetClassNameA
PostMessageA
KillTimer
InvalidateRect
UpdateWindow
SetTimer
EnableWindow
GetWindow
IsWindowVisible
BringWindowToTop
SendMessageA
GetSysColor
TrackPopupMenu
IntersectRect
OffsetRect
EndDialog
GetWindowPlacement
GetMessagePos
CharNextA
HideCaret
ShowCaret
IsWindowUnicode
DefDlgProcA
UnregisterClassA
DrawFocusRect
ExcludeUpdateRgn
gdi32
CreateCompatibleDC
StretchDIBits
CreateFontA
DeleteObject
CombineRgn
CreateRectRgn
CreatePalette
CreateBitmap
GetClipBox
SetTextColor
SetBkColor
GetObjectA
PatBlt
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SelectPalette
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetTextExtentPointA
IntersectClipRect
CreateCompatibleBitmap
GetDeviceCaps
CreateSolidBrush
PtVisible
TextOutA
ExtTextOutA
RectVisible
Escape
RealizePalette
BitBlt
CreateDIBitmap
comdlg32
GetOpenFileNameA
GetFileTitleA
GetSaveFileNameA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
shell32
DragQueryFileA
DragFinish
comctl32
ord17
Sections
.text Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jgd Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE