Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win64.DropperX-gen.12647.32571.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win64.DropperX-gen.12647.32571.exe
Resource
win10v2004-20230621-en
General
-
Target
SecuriteInfo.com.Win64.DropperX-gen.12647.32571.exe
-
Size
9.1MB
-
MD5
aa17b659e26004551b88fedc2610d998
-
SHA1
046f87d0d7a8f5cfde3309cb8716d113510af245
-
SHA256
0de84d2c3df71303041cb06398e407086407f18d91ec12969c68d7a324146c1f
-
SHA512
9b6be0ed48b8c00567f392e25e17e1022c1bf017724f9c8444700e4c005c3201852c80ed1eb6c70f45fedd9aa2b56650bd3e282c0e348894a0c353eefde78a05
-
SSDEEP
196608:NtQPIYspqUmec+PHEyIUXd1KIXGoAPqVYyOMCjllsx1HBWIkrVfVhG:DaIYEdzTHc01KLPuqMgbu1HBRuV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Win64.DropperX-gen.12647.32571.exe
Files
-
SecuriteInfo.com.Win64.DropperX-gen.12647.32571.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 9.1MB - Virtual size: 9.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ