SecuriteInfo[.]com[.]FileRepMalware[.]13355[.]4308 | Triage

Sharing

General

Target

SecuriteInfo.com.FileRepMalware.13355.4308
Size

780KB
MD5

d5e491ac4e82a0e6f27c831f2c9c1693
SHA1

a3314d65014b41e60c30385feaa8f8d289450e34
SHA256

4087a9b62568bc1b5b28f3e797a98d0e7adbe1ad699a85020b7a1bf89564a961
SHA512

3a3f2bc59f9df26159ef408981c14c0559caf0175c0d0c01e2743c65daa7a6d57dd3e6bddb37810275b3c789ac728fc2c71498dd44caf18951323e9729e6916d
SSDEEP

12288:Uz6c7ohITybPJLF2j6wjyttsYsL79eGw6S08QcHNtXpnG5Pre5iDsJtR:X2E2ypxttB27YSS3QcHNtI5sigR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.FileRepMalware.13355.4308

Files

SecuriteInfo.com.FileRepMalware.13355.4308
.exe windows:5 windows x86 arch:x86

37366700dd7a367e4c9fd0ceaeed80f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

wsock32

WSACleanup

winmm

mixerOpen

version

VerQueryValueW

comctl32

ImageList_Create

psapi

GetModuleBaseNameW

user32

GetDC

gdi32

BitBlt

comdlg32

GetSaveFileNameW

advapi32

RegCloseKey

shell32

DragFinish

ole32

CoGetObject

oleaut32

SafeArrayGetLBound

Sections

.MPRESS1
Size: 501KB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 274KB - Virtual size: 273KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE