SecuriteInfo[.]com[.]Win32[.]PWSX-gen[.]15295[.]22315[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Win32.PWSX-gen.15295.22315.exe
Size 1.8MB
Sample240206-mjs5zaebd8
SHA256 709a649fb8f72f7244568876a59212ce52687faca8b0e1928e73dfd91b2314c7
MD5 97801dcaf20d1c32975b77f54b4ef9fe
SHA1 9898aeec815605d1907b13016d3cb16b0887abe3
SHA512 38440f4adcaf14dd3342ed83c58aecd82d9d9115a480d4f2a66abd86f26745387167ed35453d79686b6ae90afac43c1cf20f43ce3a03a3319a839558f5329385
SSDEEP 49152:QVITE4LrzPGJ1Kv576zGrkXSRsztMP6++8Bfrujtoy7:nTrLrzPGOAirkXS6yC+XBfWKo
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.PWSX-gen.15295.22315.exe

File Explorer

SecuriteInfo.com.Win32.PWSX-gen.15295.22315.exe

.exe 1.8MB

SecuriteInfo.com.Win32.PWSX-gen.15295.22315.exe

IMPHASH 2eabe9054cad5152567f0699947a2c5b
SHA256 709a649fb8f72f7244568876a59212ce52687faca8b0e1928e73dfd91b2314c7
MD5 97801dcaf20d1c32975b77f54b4ef9fe
SHA1 9898aeec815605d1907b13016d3cb16b0887abe3
SHA512 38440f4adcaf14dd3342ed83c58aecd82d9d9115a480d4f2a66abd86f26745387167ed35453d79686b6ae90afac43c1cf20f43ce3a03a3319a839558f5329385
SSDEEP 49152:QVITE4LrzPGJ1Kv576zGrkXSRsztMP6++8Bfrujtoy7:nTrLrzPGOAirkXS6yC+XBfWKo
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5001216

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

Size

181KB

Virtual Size

404KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

2.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

sqnctame

Size

1.6MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

colbszhq

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.taggant

Size

8KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

SecuriteInfo.com.Win32.PWSX-gen.15295.22315.exe

kernel32

generic