SecuriteInfo[.]com[.]Win32[.]MalwareX-gen[.]26201[.]20740 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.MalwareX-gen.26201.20740
Size

1.9MB
MD5

5de6ee585f5d1dc1f545945238b4bfb7
SHA1

75c0b4e4ff453dfc0dfd2744553dbd5fa96d68f6
SHA256

3aac527638b7e1649fbef1dcbf1384abd9d0f0d54a99ff0006ce5d6f6ad04c5e
SHA512

ae4c9fc868ab57cc2a16cd6fb6169b0346f45cecfbbfca7c11acccc23b76e3facc0df57b4259668c6e0524f5614b45f84c253a729dca835d8ae2470c1662bf44
SSDEEP

6144:NmmcP6OJhvsC68CiFT6nw10zIffT6nw10zIffT6nw10zIffT6nw10zIffT6nw10g:EDTkjW9XjA1yYu4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.MalwareX-gen.26201.20740

Files

SecuriteInfo.com.Win32.MalwareX-gen.26201.20740
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\Develop SDA\Основная SDA2\Steam Desktop Authenticator\obj\x86\Release\Steam Desktop Authenticator.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ