Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.FileRepMalware.30879.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.FileRepMalware.30879.exe
Resource
win10v2004-20230703-en
General
-
Target
SecuriteInfo.com.FileRepMalware.30879.27903
-
Size
873KB
-
MD5
caf76701dede999bd732180bfeb903d6
-
SHA1
9dc98f3c210b2b78381db8fb343b38383868f4e8
-
SHA256
a118bad62d2047fe8e2ad0cdb3aee9dd0be8daabd287e72e057531675feec3e8
-
SHA512
5263960477620ba81c5f8cdc9cb9961127074b1d80b1581d43a0079e85f543c1fb0230b1f31ce4e366f7d8878882ecd28b8ad89f075d4dc497899465100d716a
-
SSDEEP
12288:YZCeC1AgCsu2UL5Jb2k6woR6DSsijzmv4TsdqyL7W2NYpK/kumpP68rL9Um:AhC1yXLvR6wYsGzO/ahK/kumpP68rSm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.FileRepMalware.30879.27903
Files
-
SecuriteInfo.com.FileRepMalware.30879.27903.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 870KB - Virtual size: 870KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ