SecuriteInfo[.]com[.]Win32[.]PWSX-gen[.]6456[.]26562[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.PWSX-gen.6456.26562.exe
Size

244KB
MD5

3b96a72fbad2289ab79106371b9c0716
SHA1

08ade980b7ef9be88496ab1d454b8f6f323e4902
SHA256

8d511d6fbbd0ffbd98b87e80effaee645a559defea31a2a97f6cd8113a5ab854
SHA512

8b9a1bc7ca1cd1a3ff0822373e64569a695f4b8794f70fb7adc485095f7735b0b79fa3610d270c2da22efb3f2e658fdb3de1ce7f84762b9d364bbcb2cd913d89
SSDEEP

3072:/WAE4LlYXcup6n5WNnnyclOViy5g85hfOQzeXWANMHC0egdzZoHJ5ey4FTgl5W81:c4LuMup6It1OVPgUhfr6WrhwPD5L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.PWSX-gen.6456.26562.exe

Files

SecuriteInfo.com.Win32.PWSX-gen.6456.26562.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 242KB - Virtual size: 241KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ