SecuriteInfo[.]com[.]Trojan[.]FakeAntivirus[.]Gen[.]26398[.]20373[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Trojan.FakeAntivirus.Gen.26398.20373.exe
Size

6.0MB
MD5

1056eedafe646e5a4ade89a3e3fc9d93
SHA1

e7fdc684695ca2fb68cd5c24301bf3c65f856249
SHA256

7a3eab07dfe4325955473e64c9d1a3b0a972e60b6e3f18f08dd48bcff4067d8d
SHA512

54d756f5eca17b4410d92832374980b37692c4ef5d24a1c60c7e9687975e1ab5864317a09e23c6251d738a8bdc4f3ba46226b2cf94c34fdd845c4c888278b4e1
SSDEEP

768:r3wVWFs5vrQYHLunEvIpoISKZcOeDKccSBaPKoTk:r3YWq5vvioISKZj5jSA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.FakeAntivirus.Gen.26398.20373.exe

Files

SecuriteInfo.com.Trojan.FakeAntivirus.Gen.26398.20373.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5.9MB - Virtual size: 5.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ