SecuriteInfo[.]com[.]Win32[.]DropperX-gen[.]26932[.]6773[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.DropperX-gen.26932.6773.exe
Size

1.3MB
MD5

dfaf2b95477c1fc5021d56865f24c9e9
SHA1

4e3193faa031502b523812a03f7a4f006fc12d86
SHA256

1ecf4a80641db7366f049cd1a60eb75d36eb68578d5e71e4e72d2474aa9be7bc
SHA512

1cca86bd51a80fc2c1ec6e72fce0637e453a41e38f825f44e141d0488008fe62086d500eee22631a1f15648d9332ad33c61b0bc201f8b457d75efc37710d67d9
SSDEEP

24576:3Jw+jqObbKGdxzYqhf9VMM+YzdtCExxi14:Zw+GObbKGHp5MM+odtCEni14

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.DropperX-gen.26932.6773.exe

Files

SecuriteInfo.com.Win32.DropperX-gen.26932.6773.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ