SecuriteInfo[.]com[.]Heuristic[.]HEUR[.]AGEN[.]1308254[.]30877[.]21250 | Triage

Sharing

General

Target

SecuriteInfo.com.Heuristic.HEUR.AGEN.1308254.30877.21250
Size

36KB
MD5

01c33a5356f1f6aa2bd5e140120a340c
SHA1

9b6d61b8d1d12adcf4b52e139afd1255cee29523
SHA256

6d6721fd158d9bd8d2cec6c4c8e83c77f220e4453c3465988d9b3bfce27b1c32
SHA512

5d702da8d85a0cba1c16cefa33f7bb4e7b57e01af76b428e06adb3b6302cadbbf96e71b133302f1d481863ac3c2d06997f6d4f0e309e75c3fb88f7313c933861
SSDEEP

768:wb5Mx06IrKZiuOR70qf2WO98B51JQNoWo0z:wbKxJZiuOR7hu9wDJIffz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Heuristic.HEUR.AGEN.1308254.30877.21250

Files

SecuriteInfo.com.Heuristic.HEUR.AGEN.1308254.30877.21250
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Dan\Meus documentos\Visual Studio 2008\Projects\WindowsApplication1\WindowsApplication1\obj\Debug\WindowsApplication1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ