SecuriteInfo[.]com[.]Win32[.]PWSX-gen[.]73[.]3982[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.PWSX-gen.73.3982.exe
Size

222KB
MD5

4bfba6e5ed9cd96a55ff2bf5e9574aa4
SHA1

2946ad61e976dd27cbd5a45e8972330991b50708
SHA256

17bd98071059f504f54f3a5c358adec993bc11da2f631ebddcad386bf803f5a1
SHA512

aea76e7c746acb93c84c0791480e93c9d6bb75b0bc52b8cb586dea6c962efb3f53202d3970baa1317aa1492acb097173ba4c978718d38cf0b8ae45f4c050ed0c
SSDEEP

3072:GABZ6iooeCnsxcsPitFMvRr87mcZ9z6zDOz3kdWNV297WTZqHGqpuF/GzHJhaukP:GmsuXtFMvRr8a+9zqDOzY41h3RBi/6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.PWSX-gen.73.3982.exe

Files

SecuriteInfo.com.Win32.PWSX-gen.73.3982.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 219KB - Virtual size: 219KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ