General

  • Target
    SecuriteInfo.com.Variant.Tedy.947919.13115.16471.exe
  • Size 520KB
  • Sample260425-e3b2ssft4x
  • SHA256 40954b27b8d9c5affe5035f26727cf48ddbc3479cc0aefa75f4394637534bb57
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

File Explorer

  • SecuriteInfo.com.Variant.Tedy.947919.13115.16471.exe
    .exe 520KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • Avantage70/Vindicates.jpg
    .jpg 17KB
  • Avantage70/autoinfection.jpg
    .jpg 20KB
  • Avantage70/bankerotters.txt
    317B
  • Avantage70/bojars.jpg
    .jpg 28KB
  • Avantage70/centrumsdemokrats.ini
    191B
  • Avantage70/dieldrins.ure
    1.6MB
  • Avantage70/engineerese.ini
    649B
  • Avantage70/ferritantenne.jpg
    .jpg 30KB
  • Avantage70/floejte.txt
    490B
  • Avantage70/sankthansaftners.ini
    346B
  • Avantage70/selvvalgs.jpg
    .jpg 19KB
  • Avantage70/slagtofrene.txt
    59B
  • Avantage70/spark.ini
    555B
  • Avantage70/teeter.txt
    676B
  • Avantage70/trisulfide.jpg
    .jpg 2KB
  • Avantage70/upsurging.jpg
    .jpg 8KB
  • Perspektiverne/Bignoniaceous.txt
    609B
  • Perspektiverne/Indeholdelsen
    235KB
  • Perspektiverne/Morphonomy.ini
    597B
  • Perspektiverne/Supinely
    146KB

SecuriteInfo.com.Variant.Tedy.947919.13115.16471.exe

  • IMPHASH 9a16e282eba7cc710070c0586c947693
  • SHA256 40954b27b8d9c5affe5035f26727cf48ddbc3479cc0aefa75f4394637534bb57
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

  • NSIS installer

Minor OS version
0
Major OS version
4
Entry point
13331
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths