SecuriteInfo[.]com[.]Win32[.]DropperX-gen[.]25733[.]17471[.]exe | Triage

Sharing

General

Target

SecuriteInfo.com.Win32.DropperX-gen.25733.17471.exe
Size

291KB
MD5

038409d8dd6fc2fa2925291ec2e135e8
SHA1

a6a26917174a91761f2ad6db0ab105d03ed1935a
SHA256

4ee20e6e4d1b18999911454d2672a5b97914712e7f8c4fd2a8156a2c455d0023
SHA512

1d0ebd3422351ca8e6808d969f37f7d05edf6880e69e29aff11452d40143dd184c544662fb3653a921a1c8310095f1193ec28b79003709f8d2970faf72c804b5
SSDEEP

6144:IMI1zrYcxmZZvK9F+oRZNSwAJnBihtt1qeG8vNBehdOkMORyhacvS9I/0ms9Yxh4:IMI14cIZZvK9lHNSwAMqeG8vNMhAh2B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.DropperX-gen.25733.17471.exe

Files

SecuriteInfo.com.Win32.DropperX-gen.25733.17471.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 289KB - Virtual size: 288KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ