Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan-PWS.Win32.OnLineGames.32297.15620.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan-PWS.Win32.OnLineGames.32297.15620.exe
Resource
win10v2004-20241007-en
General
-
Target
SecuriteInfo.com.Trojan-PWS.Win32.OnLineGames.32297.15620.exe
-
Size
178KB
-
MD5
20ae864e35be7ef2c9c51d0626b0ffc4
-
SHA1
ece10ce5f1af3714a7bb98297e28f94f50881329
-
SHA256
a1186f3ce4cfcb84f5bc972654ce89b87cd864709de7061230528b4864e557e3
-
SHA512
56c24475880740b5175b73e411753bd63a51d7dbe67a4703240db647e370881d0cb43efbe9b2495c6dac25395d8697678691e921bcca83097859ac9a4cf19c90
-
SSDEEP
3072:dU02zlCsbS35DZYZPhE6grgp0UJqyO5TKoszR4tMFQGKsa9J3bIZsq+Y:6061S3tZkpi1UJqVxsV4a8saXbWX+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Trojan-PWS.Win32.OnLineGames.32297.15620.exe
Files
-
SecuriteInfo.com.Trojan-PWS.Win32.OnLineGames.32297.15620.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 145KB - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ