Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.Evo-gen.6425.468.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.Evo-gen.6425.468.exe
Resource
win10v2004-20230220-en
General
-
Target
SecuriteInfo.com.Win32.Evo-gen.6425.468.exe
-
Size
24KB
-
MD5
9fccc3d74e3c804e6e73c3dc743ee6ea
-
SHA1
97aedfe0a9700d0b260c1f8f5bddb2c95afe4fc9
-
SHA256
d92a0e1d195837ae1d9de4c627499de7a35a419ea1a3b6370f0d52fa8e56711d
-
SHA512
dede3111a5485daf5ab1098a86cf3219baf92191b69bc1b3e8feab7e59a5723ad98c608c46c571116903df1a4833fe5f254dbb18104d29cd67a9ecbd6e72b739
-
SSDEEP
96:YNZ06kaq8XVK3faqPMIaqDsUgD5UrKGo2x48RtoGfjh5k5YhIhs4:U3kaTXVCfahIatUgD5UuG08To0xk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Win32.Evo-gen.6425.468.exe
Files
-
SecuriteInfo.com.Win32.Evo-gen.6425.468.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.clam01 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE