SecuriteInfo[.]com[.]FileRepMalware[.]21548[.]25860[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.FileRepMalware.21548.25860.exe
Size

184KB
MD5

d10db6ddce48da8341181e52b8d61bf2
SHA1

249c626e0826795b564f8191cb8417306444c9ef
SHA256

db049f954b46b3a560090bb8df9e0649ff77a77051f441abb19b96723ec820af
SHA512

7e5bf9aae4e857239f1ca0fd3164c8b5bc6f4ee185ad5ad019da41903309b936d1ea61a4f5f0b6d5768a9673b33cb68626d643459fc956d93822d40a68fea498
SSDEEP

3072:QdISdlDZDdzhR6QTTTTT0TTTTTHTTTTTTT8TTTTTTTTTTTlTTTTTTTTThTTTTTTq:YdlDZDdzhR6ySSWScGVGbeQ0YviSh0g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.FileRepMalware.21548.25860.exe

Files

SecuriteInfo.com.FileRepMalware.21548.25860.exe
.exe windows:4 windows x86

51d5f507286fe9a2db75f423fbc06a61

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

fabs

comctl32

InitCommonControls

user32

IsChild

gdi32

BitBlt

ole32

CoInitialize

shell32

ShellExecuteExA

winmm

timeEndPeriod

shlwapi

PathQuoteSpacesA

Sections

.MPRESS1
Size: 20KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 159KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE