Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.TrojanX-gen.11211.15058.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.TrojanX-gen.11211.15058.exe
Resource
win10v2004-20240802-en
General
-
Target
SecuriteInfo.com.Win32.TrojanX-gen.11211.15058.exe
-
Size
1.8MB
-
MD5
fb7a8b02dd65f3ff7a266187268483b4
-
SHA1
2262b093308e533d231154f22a84192abec2fc82
-
SHA256
12a3a4d3572954aacd37dd7b0a32e1380b9bf7570b65a63f644ace6f181b6ee9
-
SHA512
5293343f889d8cd68c13987b618a9e1e0cd62097ee5a9eaae61a82b02b135e9e8e2151adeb215c23ff51f87744bf7554655d98ae2b0c0f7dfac50c22c872d579
-
SSDEEP
24576:KdkJMahRP3kq8RD58MniPdEJsSWPWjsfKvKsujutm1We+US2rDK/zvaFi07bMtvZ:ikJM8RcRD5ZiOJsJ8oeKt6Wa7ggMK9g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Win32.TrojanX-gen.11211.15058.exe
Files
-
SecuriteInfo.com.Win32.TrojanX-gen.11211.15058.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iihynabq Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fobtydpv Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE