Trusteer[.]zip | Triage™

General

Target
Trusteer.zip
Size 3.3MB
Sample240901-1dp31sshna
SHA256 b3b3a4a9ac1cc6715d8c875ac34f92708d0b9f91104b793768ed90baa57c97d0
MD5 e901a3d2239142f7a3a5d93320ffcff1
SHA1 c33eac1862db3611730d62c688430c235feaefe4
SHA512 2e9187e3af506e6311e284fe2a26b5711e7c99425e80a3e1dd7fdb435ba9297298988a715bafc950cfe7071d035f54ed36b2cbfeb17e201eb3a3620e256a582f
SSDEEP 98304:YcS/hHOGLVlQtM2xOxWwyvfOUe+sz2oIjx2hA2Z1IrJMy:YvZdswW1mU7sz2oAG0rJMy
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Trusteer.exe

File Explorer

Trusteer.zip

.zip 3.3MB
Trusteer.exe

.exe 3.3MB
__MACOSX/._Trusteer.exe

401B

Trusteer.zip

SHA256 b3b3a4a9ac1cc6715d8c875ac34f92708d0b9f91104b793768ed90baa57c97d0
MD5 e901a3d2239142f7a3a5d93320ffcff1
SHA1 c33eac1862db3611730d62c688430c235feaefe4
SHA512 2e9187e3af506e6311e284fe2a26b5711e7c99425e80a3e1dd7fdb435ba9297298988a715bafc950cfe7071d035f54ed36b2cbfeb17e201eb3a3620e256a582f
SSDEEP 98304:YcS/hHOGLVlQtM2xOxWwyvfOUe+sz2oIjx2hA2Z1IrJMy:YvZdswW1mU7sz2oAG0rJMy
MD5 SHA1 SHA512 SSDEEP

Trusteer.exe

IMPHASH baa93d47220682c04d92f7797d9224ce
SHA256 2ad801c4a4f232b02c940858d69c3d3608c6df1606b73c76494e1d7d0d30e761
MD5 30cb49e14aa0f3247110df5dc1a1690b
SHA1 84521809033b25b01338e3087881d4c37b4d0faa
SHA512 c206045d0c2ba0dfc773bb5b41db0802127d86d521b6fe41523d63e59b79a2657dd960b3ca1dc1be31298279d920f3080a5e72803cd11fe261b32e08cd3577e9
SSDEEP 49152:p7RUQh1V1fO/9DA0q3i9aLrsvHyR15U8dJAsgWpyTulz9b9H5vDCjeMeZi7uax:p711TMeS92r1155A/0ysPZvej3
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

12046336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

Size

1.7MB

Virtual Size

7.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

2.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

zvjcsfcd

Size

1.6MB

Virtual Size

1.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

juopcaqm

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Trusteer.zip

Trusteer.exe

kernel32

comctl32

generic

__MACOSX/._Trusteer.exe

Sharing

General

Malware Config

Signatures

File Explorer

Trusteer.zip

Trusteer.exe

kernel32

comctl32

generic

__MACOSX/._Trusteer.exe