SecuriteInfo[.]com[.]HKTL_PORTSCAN[.]25654[.]4389[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.HKTL_PORTSCAN.25654.4389.exe
Size

131KB
MD5

fc167612cef19f43576c5622d8468131
SHA1

98fd2d77dbfcbd96fd38ca1a55a40d9bf9a93943
SHA256

7f447f0a1d70bb8fc183eb123fcdc8907c7a1dbb1c7f3e9c1c8fca5808b733b7
SHA512

8df60fcbefd4b8f022744e83cdb42a2ff50a1a66685655d2d3ba4eb0d9d50cdf0a2166db3e151a6ad41e1c160c5f558a632179ea657b3eb644fa88bf5dc8e021
SSDEEP

3072:dp0Eq1bBGsOZ0eBiuEkmTF7l8iqAgYUm0/zhlZJce:UEq1Ms0lEvTF7XqAg5zpKe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.HKTL_PORTSCAN.25654.4389.exe

Files

SecuriteInfo.com.HKTL_PORTSCAN.25654.4389.exe
.exe windows:4 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress

Sections

.text
Size: - Virtual size: 81KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 143KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 2.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 26KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

exever
Size: - Virtual size: 565B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.q
Size: 128KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ