Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.HEUR.13105.17052.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.HEUR.13105.17052.exe
Resource
win10v2004-20230220-en
General
-
Target
SecuriteInfo.com.HEUR.13105.17052.exe
-
Size
14KB
-
MD5
a26056d4e9072ce6d33fe432488cebe5
-
SHA1
6f190f63905cfb0613e2eb08ef3c76d4da7420b7
-
SHA256
2325d938e14eb391e31417ba5947be01ab019835d659761f7e2e25089bfc58ee
-
SHA512
fa4727f4b8dd93519dea00ff835d01dd30ce5d5da513d1f024167a38a33712aad07159bb8aebc95ca26c26cb22874f9c3c7569aab0529e48ab8be83d724243af
-
SSDEEP
192:OHMFzwFtKyvteS7rSDlGX6nghDNYZhlsQKnhYykokVnuqZ3iKWe028OX:7BotxeEWJGKLPlsQKnh8oMuczW2P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.HEUR.13105.17052.exe
Files
-
SecuriteInfo.com.HEUR.13105.17052.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
PECO Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VBOX Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ICD1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
ICD2 Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ