SecuriteInfo[.]com[.]Win32[.]KeyloggerX-gen[.]11277[.]18501[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.KeyloggerX-gen.11277.18501.exe
Size

373KB
MD5

df72ac63e2d66562d21032c3e4d27772
SHA1

6329f89af2093d5ebb6ce5dcd0dab6e856e76c66
SHA256

5a6a724c8195e65a395491e429806920b7c6e994bcc6b5fe0c2c3339fabcc4ff
SHA512

4803c32a3590177307c29cd05b36f4688ac0a88240da8c70ede4a1fbe173ffbbb1190a5e070a8d42e201cf7f51c730c021086981cda236ccf6383a7a78333bf4
SSDEEP

6144:YZrrQcxdlV/TUB/VfoPJ/KTFWqWR1MqkD5Vo9DllIU0Dj0EdIS4q395eJ+0Gf:Y1dlVW/v5Wz15mVGnIVDo3Ut+0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.KeyloggerX-gen.11277.18501.exe

Files

SecuriteInfo.com.Win32.KeyloggerX-gen.11277.18501.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 333KB - Virtual size: 333KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ