SecuriteInfo[.]com[.]Win32[.]PWSX-gen[.]9403[.]13485[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.PWSX-gen.9403.13485.exe
Size

615KB
MD5

280b7fc7691f4ef2ab7e4fd6a0ed9c62
SHA1

d34061308542ffd1a0940dcbdca8fdf54aaa3b85
SHA256

866793fb3e5da0b352d26f37db6deaa73b598019a29c0434da5a805c12fda095
SHA512

c935f6c59c4ddd6c3e3983bf9559f912a2584b86080ce5ffe0bc49cf1f1a1a2f1318ef7849ac1196277cd062352c22dbda3756f9e988510df3fe88da4e511082
SSDEEP

12288:dALLsbJC65ntJmIoOoXpaxl7DAdMpMAwDADqS:dALLsb77oa8SHq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.PWSX-gen.9403.13485.exe

Files

SecuriteInfo.com.Win32.PWSX-gen.9403.13485.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 612KB - Virtual size: 612KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ