SecuriteInfo[.]com[.]Win32[.]Evo-gen[.]3350[.]11909 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.Evo-gen.3350.11909
Size

84KB
MD5

6d122c97b5d5480e9d9adfdca81667a6
SHA1

4c7f0245b45deddab8bfb0390a3ecefc7ca1a33c
SHA256

472d6c67645c5c79538c1186377ff11e47770e3fe25fe3175277294674bde638
SHA512

22833910400b3e01158b55e6653754e7bd75ac828775e6dbedd72dbf963dabf039c02ebec6b7ebfe84905c32389b6a9af2eb49d4d5238fd0502f0598ae0ba99c
SSDEEP

1536:fZOw9SHRa9RJPQ8PlQH1W/dvByRBL/y4eLf+:JZRJPQ8PlQ0/d5yRBL/yVf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.Evo-gen.3350.11909

Files

SecuriteInfo.com.Win32.Evo-gen.3350.11909
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.code
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ