SecuriteInfo[.]com[.]Trojan[.]Surveyer[.]337[.]24951[.]31423[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Trojan.Surveyer.337.24951.31423.exe
Size

12.0MB
MD5

0127fe15dacdc7da5e3c59b10bc8ba27
SHA1

16f8b71e8df787e5dc2de624a42066d62a5af1d4
SHA256

61cec0abade96e0f4198182fc4111ea70a63207a45da87ab896db12a4a6bce22
SHA512

12733f45acd9c0ef384605ede2607faf09c4afd674b0944111577797f10d26781bae482b4b965bcf975fd4e09a58e53e9baf6b4ea409b12eb396166037ef6274
SSDEEP

196608:cbAjz/0b15TiJDFDR5n41W3P7pleWhCQlm+pdLdmp5oZZ3y6EC3WWK5XMNwN5:Y6+daDR5n41Qliam6LmkZ38Cm58NQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.Surveyer.337.24951.31423.exe

Files

SecuriteInfo.com.Trojan.Surveyer.337.24951.31423.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\Wsolpraca Install 2025\1 Do moich blogów\The Sims 4\Wsolpraca Install 2025\Wsolpraca Install 2025\obj\Debug\The Sims 4 - Setup.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11.9MB - Virtual size: 11.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ