SecuriteInfo[.]com[.]Win32[.]PWSX-gen[.]17862[.]29718[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.PWSX-gen.17862.29718.exe
Size

814KB
MD5

beec5ec2f2de6d27d3dd8856284d57c4
SHA1

4b4f0d658d85ae74a031356014ca69a82508052c
SHA256

115b55acaffb20f7d3e7edd5292f4569b295683e2ad454088cc35eebd6492b87
SHA512

b67bd9c122633161f01174cbc61172e8f16e9a021251932ce368a7f2f0a68de1798eb61227267947c700c2fb72f482ca95c64a95b50097475a89b8729c023deb
SSDEEP

12288:xd3do3rsI7owA4LxCcFqVNrqzdtfOwOq4UuX+iCr9f14:xd3do3rsIMwzxCcFWSdtfOwOq4v+96

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.PWSX-gen.17862.29718.exe

Files

SecuriteInfo.com.Win32.PWSX-gen.17862.29718.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 812KB - Virtual size: 811KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ