Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.Evo-gen.5212.1329.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.Evo-gen.5212.1329.exe
Resource
win10v2004-20231020-en
General
-
Target
SecuriteInfo.com.Win32.Evo-gen.5212.1329.exe
-
Size
608KB
-
MD5
3537b4d56b3b37a48251358f23a8f4e6
-
SHA1
44ee78b88cd255dd1c02aa0b125d9f52e2e052b4
-
SHA256
199aa258d827bea1dc8986ed300b079e13d2f87c24e50e97a9f5a58c83617991
-
SHA512
688acec5d38727ee0bf329e8ab9ccd08fcb3574df0d09edd6038af0eeb034aa235c325bad9e38121b17f5dd1c28de711f6348dcd4699421b6a441ba8caa6c5fa
-
SSDEEP
12288:ZqYs8NBcpn+UGtmrO3SypoLukeWdfVG0kL8ZJUXWvjQdJqEX4:ZqYs8spnZtO3SypdkD88XUX2jQX4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Win32.Evo-gen.5212.1329.exe
Files
-
SecuriteInfo.com.Win32.Evo-gen.5212.1329.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 607KB - Virtual size: 608KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE