Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win64.PWSX-gen.4797.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win64.PWSX-gen.4797.exe
Resource
win10v2004-20230703-en
General
-
Target
SecuriteInfo.com.Win64.PWSX-gen.4797.14419
-
Size
972KB
-
MD5
f59ce8ba6de46e22893073e6f6dfae0a
-
SHA1
5bba420a3085990ebd7b37bb4a523e70f743a3bf
-
SHA256
95c36c1a0484fcfee91f34a49bb2e48c6d2f4e923327ba8c34d8e79fdb14f744
-
SHA512
6baec84f1490b98a086a00e3935ef62a8a8cab5ec53710ed4059916fac53c9179ce53f6e5aea243632e123fe992abf419b028571a4d559f85d6f5b3ee1d55699
-
SSDEEP
24576:FkybnGhv4ST3AJcCX4Xqma4XFfdnLjR/GDmZV:FkA+RAlUFJLj1TV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Win64.PWSX-gen.4797.14419
Files
-
SecuriteInfo.com.Win64.PWSX-gen.4797.14419.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 970KB - Virtual size: 970KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ