SecuriteInfo[.]com[.]Win32[.]MalwareX-gen[.]10654[.]19910[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.MalwareX-gen.10654.19910.exe
Size

1.3MB
MD5

a3eba4c7881fda2701697f90b1ea76ca
SHA1

f0452b032111d2f8bb85cd734acb25c5f361f2f8
SHA256

e8248ba17d6fd9a41feb465160c96b092a5b2aa7cbe43142661af7ffeb0ed0d1
SHA512

3d20566f921223eca7cb63a9fb0f3fa19715eec884adeb5c7483c64d7db1d15cb23c6cb336354c2b08c94d154e85511b86738309ff27e952d97bf0826846de84
SSDEEP

24576:tUbWz2oUf/c0GkNLaL16T0lcJ2b0YIXT/64l:tLzt/kNfWfbRID/Zl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.MalwareX-gen.10654.19910.exe

Files

SecuriteInfo.com.Win32.MalwareX-gen.10654.19910.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

F:\update.huyetchienpk\autoupdate-open-moi\obj\Debug\Autoupdate.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ