SecuriteInfo[.]com[.]Riskware[.]XmasAds[.]22242[.]20700[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Riskware.XmasAds.22242.20700.exe
Size

488KB
MD5

4cf1413f29e25dc88caec3efa37d8a27
SHA1

56cd1692456bace0cce3faac1fcdf811cb859e71
SHA256

2065b1f9385624ee1968e170e0e0124aed055ad99ef2d9b2194f252ebe65c72f
SHA512

633c4d406fd47f831d694a6e391c9d37327826271893e3f476f16495600b4b2fc149bf8091dedfb633f91513317bd8a12bc24f7094c04e61af533e0595ce302e
SSDEEP

6144:W6sf2/vKWovHY3wqETGpE1oab9q5qpHiwfHJh7dUT+8UhM0igc/i77db+UPhwB4B:w2/vKWQ4kK5ihh7a0VcgkUP2B45Gaj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Riskware.XmasAds.22242.20700.exe

Files

SecuriteInfo.com.Riskware.XmasAds.22242.20700.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 371KB - Virtual size: 370KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ