SecuriteInfo[.]com[.]Win32[.]Evo-gen[.]17168[.]16102 | Triage

Sharing

General

Target

SecuriteInfo.com.Win32.Evo-gen.17168.16102
Size

48KB
MD5

2c410754a7f8628c4f94ef6347fbefe4
SHA1

6d545b2820875a9432957433cbd15cb84a25dc87
SHA256

5f6d45153a4056f9a57f997f551d4bf2b4c97445678fb91086e8ba16d63ad8b1
SHA512

e224b47428598eaf72e37ff2db9ec1cff4a992fa7747571bc58a1893b2691d62f9a8ac7e5b03b0881dbf43c58b7b515e34f00ce73b91e3bb2e9ef8f912fa436a
SSDEEP

768:qRCTHaxVM8mrYwAWlcVyBVLau5hNBKKyO:gCT+twAWlGyWKhNBKy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.Evo-gen.17168.16102

Files

SecuriteInfo.com.Win32.Evo-gen.17168.16102
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ