SecuriteInfo[.]com[.]Win32[.]PWSX-gen[.]12987[.]5667[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.PWSX-gen.12987.5667.exe
Size

1.4MB
MD5

cab033e5cff95d43018b44700c57aaab
SHA1

da244ba004ace1d816a4dd02432b1ddd6ad08705
SHA256

f40e1c8b377326be3e33ef49ddfb71fabf7af2f9a337a3c74784fc7f0356edcc
SHA512

8c9762efcdb34a095bb1f32029187a336285018b4285ed2751980b068bae38a8acec43408c8ba59482e359867075321c232f0e7bf7d4a83db7aa992400ca57ca
SSDEEP

24576:q5bt0TvRwHWin95SdORUk0kDVzPUGYwvDbGi9nu7ipJ85S5G1DUl3V:k0TvRwHMau0S1DUll

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.PWSX-gen.12987.5667.exe

Files

SecuriteInfo.com.Win32.PWSX-gen.12987.5667.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ