SecuriteInfo[.]com[.]Win32[.]Evo-gen[.]8496[.]14358[.]exe

General

Target
SecuriteInfo.com.Win32.Evo-gen.8496.14358.exe
Size 226KB
Sample240119-e234wsfeb6
SHA256 07eaac9f4ff5be4b5b0d5aee9262e5c81b1e4ce4cdb001be71c43c0d8e54a0db
MD5 c8bfa7dee741afe94d298d7316c80dea
SHA1 f6240c7f5aa75e61c082b60c20cec3be2121e772
SHA512 d1978bf9aea3d6ff4be095bf92be3684aa9de2340e218fd12746fbd79cef5c2c07000f260c560f8672ec3bad7104c91ce9acc75549be8f0bd08ff4e9e6791780
SSDEEP 3072:9cWftD82aso/VT19EBIUUfBtMpEJPdvlwRPaNmAcsPlEIQTIyYsSZmu/KN/lNs:9cKI2asotoC2w16KcsPlsBuA
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.Evo-gen.8496.14358.exe

File Explorer

SecuriteInfo.com.Win32.Evo-gen.8496.14358.exe

.exe 226KB

SecuriteInfo.com.Win32.Evo-gen.8496.14358.exe

IMPHASH 3ecb21051909150039ed4a92b8c7c0f5
SHA256 07eaac9f4ff5be4b5b0d5aee9262e5c81b1e4ce4cdb001be71c43c0d8e54a0db
MD5 c8bfa7dee741afe94d298d7316c80dea
SHA1 f6240c7f5aa75e61c082b60c20cec3be2121e772
SHA512 d1978bf9aea3d6ff4be095bf92be3684aa9de2340e218fd12746fbd79cef5c2c07000f260c560f8672ec3bad7104c91ce9acc75549be8f0bd08ff4e9e6791780
SSDEEP 3072:9cWftD82aso/VT19EBIUUfBtMpEJPdvlwRPaNmAcsPlEIQTIyYsSZmu/KN/lNs:9cKI2asotoC2w16KcsPlsBuA
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5646

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FreeEnvironmentStringsA GetModuleHandleW GetTickCount LocalFlags GetConsoleAliasesA LoadLibraryW LocalShrink GetLocaleInfoW GetConsoleAliasExesLengthW HeapCreate GetAtomNameW GetEnvironmentVariableA CompareStringW IsBadStringPtrA SetConsoleTitleA WritePrivateProfileStringW TlsGetValue InterlockedExchange GetLastError SetLastError GetProcAddress SetComputerNameA LoadLibraryA OpenWaitableTimerW LocalAlloc SetCalendarInfoW GetTapeParameters GetModuleFileNameA EraseTape FreeEnvironmentStringsW CompareStringA LocalFree SetFileAttributesW RaiseException FindResourceA HeapAlloc GetCommandLineW HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DecodePointer EncodePointer ExitProcess WriteFile GetStdHandle GetModuleFileNameW HeapDestroy GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetCurrentThread QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage HeapFree Sleep FatalAppExitA SetConsoleCtrlHandler FreeLibrary RtlUnwind SetStdHandle WriteConsoleW MultiByteToWideChar LCMapStringW GetStringTypeW HeapReAlloc IsProcessorFeaturePresent HeapSize GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale CreateFileW CloseHandle FlushFileBuffers

advapi32

OpenEventLogA

Sharing