SecuriteInfo[.]com[.]Win32[.]PWSX-gen[.]25625[.]17803 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.PWSX-gen.25625.17803
Size

326KB
MD5

40da41840a588b8c468db3686c2edd98
SHA1

0d155ac9945d2d3b31c958381a0909897ec821d2
SHA256

6e5b648d1e574dfbbd6337c6d11b851b2b12efec1f0ae59b1327e0dce1dfe7e6
SHA512

a15fb1b042d40fbf2125a5fa9683f817082c4ba7e8cd1b679832be480243800fb4758bc2d7f9d6e897e4d7a9a1ea0d77bb3c363eb39eb5c1283545efdeddf368
SSDEEP

6144:6cU//2mWwYQ9svBIUDbXSpt2g9izux6qcu0J9:67/mwYsgdz9i6UA9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.PWSX-gen.25625.17803

Files

SecuriteInfo.com.Win32.PWSX-gen.25625.17803
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 314KB - Virtual size: 314KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ