Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win64.PWSX-gen.14476.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win64.PWSX-gen.14476.exe
Resource
win10v2004-20230621-en
General
-
Target
SecuriteInfo.com.Win64.PWSX-gen.14476.13319
-
Size
28KB
-
MD5
816da502dd93bba053d28ca41767c94b
-
SHA1
91d82213d96f6f09922f397f2689b51b2471b7e6
-
SHA256
be3324f0d5a2da5608acf864ed8eb35df95081915d10d8f8a81c302747dc7710
-
SHA512
0f2ef360ec0d242d10533a4d85da18f04a943f38d42b0d119ac141174921eca0d6a14be0ee947b692feaced0aba605d36ee3631152bb12e355e898dbd963382c
-
SSDEEP
768:Nt5dnpmraeMGOToX6h98hMIA1mAojF73d8iUBtYA:rduacOl6SmXatYA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Win64.PWSX-gen.14476.13319
Files
-
SecuriteInfo.com.Win64.PWSX-gen.14476.13319.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ