SecuriteInfo[.]com[.]Win32[.]PWSX-gen[.]8485[.]25115[.]exe | Triage

Sharing

General

Target

SecuriteInfo.com.Win32.PWSX-gen.8485.25115.exe
Size

2.8MB
MD5

1bdbd5c1ab6fe548bdeeb09d39a4f695
SHA1

4f571ab8ec12301d07cf716269f1e9c21cbb22f4
SHA256

cbd9fe54df365905b812f5fe8a1305fd98bd98f7fe92e426ef3c1d4c72d49f72
SHA512

4bf2e476005f04f3eff7c5eddbcea51ce5d0de4716e85d572e686afe3328ec05102c995e36eeabb414911079f07d92bdc4ad88b7372e1674dae2d467426f86b8
SSDEEP

49152:z1A5scNs9oLw126HONYyf9Oloexrr7qw6FwhkA3UU79UxeO0:z1CVVcUvNJf9OlNxf7qoD3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.PWSX-gen.8485.25115.exe

Files

SecuriteInfo.com.Win32.PWSX-gen.8485.25115.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ