Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.HEUR.23245.19803.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.HEUR.23245.19803.exe
Resource
win10v2004-20230220-en
General
-
Target
SecuriteInfo.com.HEUR.23245.19803.exe
-
Size
101KB
-
MD5
2acf1f6d7e3e541552fa766b98209605
-
SHA1
9faac07108588a55507b53e35e5807bff8754c2a
-
SHA256
675e02bd9dd6115a7a7478cde90764117dd6e4b75dc278bb5f2660cc15c59191
-
SHA512
698173f81b3765a59a9311bfb47cf4f768fb6c05a3247a19a3e1c4a848e49ff021dbe88307086ab989be2d1564051708e2b45f3efd70b4f8e078c42f67195161
-
SSDEEP
3072:fbF7gI11R8tdNpfnfYybLIYH4lkzEM5xb:fB7tRkPwlkzECZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.HEUR.23245.19803.exe
Files
-
SecuriteInfo.com.HEUR.23245.19803.exe.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 81KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE