SecuriteInfo[.]com[.]Win32[.]Packed[.]NoobyProtect[.]B[.]19272[.]10303[.]exe | Triage

Sharing

General

Target

SecuriteInfo.com.Win32.Packed.NoobyProtect.B.19272.10303.exe
Size

9.2MB
MD5

ec56eeb71e199ebc1c9c8d5eff1659a2
SHA1

28e24a79b4c02b18d10d6edad45c87d476f7ba1d
SHA256

796532da7676cca64bf1d483adabc8c430d171c63076f74cb71e85700404816f
SHA512

ad7486afc9e841cdfee20fa9e6dee60572c18acd3d2eacbf55da1ec68f2feec780116b68a7e014c2fba77de4fdc4830349f01d255c5e991c4f4df3da422f14fa
SSDEEP

196608:Cq/3bo2EWqgunGFccUFwtTFQNNkDxNBGX5z4CGwFNub6LSFb6rlG:tsPWqg2G8WtSUdNBwUTwTub6Imk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.Packed.NoobyProtect.B.19272.10303.exe

Files

SecuriteInfo.com.Win32.Packed.NoobyProtect.B.19272.10303.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ