Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.PWSX-gen.13397.19541.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.PWSX-gen.13397.19541.exe
Resource
win10v2004-20230915-en
General
-
Target
SecuriteInfo.com.Win32.PWSX-gen.13397.19541.exe
-
Size
806KB
-
MD5
27d0f9389dcd690e6e6976427f1e266c
-
SHA1
fad6dfc65eb539dc7438096c10d3b18b21c5a97f
-
SHA256
763db148488de0ecda28ac3d55147a0dc7b092a64e915bff98529b0185668e03
-
SHA512
7d4eabce3c2860ac4a7e2093b53fbe85b7bceceaee1f5133a2fee914c9a3e13fd155a7886bb0ec9c98906f010cb5f3a0509833e87f650b8797daa970a87939c2
-
SSDEEP
12288:ZzfqBuqzo+ouymkp0y63wKFFouZ30+rPe1hNDuJ7AYfmDy:ZT6nLymaKFFouegPiP27WDy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Win32.PWSX-gen.13397.19541.exe
Files
-
SecuriteInfo.com.Win32.PWSX-gen.13397.19541.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 652KB - Virtual size: 651KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 153KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ