SecuriteInfo[.]com[.]Trojan[.]KillProc2[.]18203[.]30823[.]3800[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Trojan.KillProc2.18203.30823.3800.exe
Size

621KB
MD5

7f8b6cd2d698880ab241c94d3b2ffc66
SHA1

d9deadf945f8c36436915f6610e99d42e7d5b3be
SHA256

66092a932419e563fbc5f3f8222f7296da31183a0f11c0e1e5ad63de5adce58b
SHA512

3f3a015352375ba880378e7e2cfa5837de565d6f3a968ba9a4fd17facd825fe0aecf6eb464a0c1fd29be59b855add33e627266b66b996fba159f504a5f70a6e9
SSDEEP

6144:2iuoMqZYUM4jWvpG35cXgyH4s7DzQ2bgy+vdobH5dBwlmx13w:2crZI4KcEYgsvdobZDr9w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.KillProc2.18203.30823.3800.exe

Files

SecuriteInfo.com.Trojan.KillProc2.18203.30823.3800.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 266KB - Virtual size: 266KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 354KB - Virtual size: 353KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ