SecuriteInfo[.]com[.]Win32[.]PWSX-gen[.]16997[.]1975[.]exe | Triage

Sharing

General

Target

SecuriteInfo.com.Win32.PWSX-gen.16997.1975.exe
Size

711KB
MD5

a44c10fe0cb32d27dfaa9711479ae8ce
SHA1

248bb1be5525f2953a03b308feb4e54f1ddd5a91
SHA256

09b95ed256df0aa2ecc4b2fbee4289ed8f2da5edb46dcdb2b177e939ae8957df
SHA512

9030f2dffdfb7b4cddb88d6e49dde313f9c0fb407a60d5d82215ee343386ea844fa6c82114c4dd9ca0913e2530701900648c86896df4d5a060030bdd9e15a730
SSDEEP

12288:oXD8/0ExKjx2yVIFKosv/XxvYPSLSu2Yrr5ymdNP2nWsoMNvzxE3MXtg4piFabVR:q/bajsaCXAm7PLMS4pi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.PWSX-gen.16997.1975.exe

Files

SecuriteInfo.com.Win32.PWSX-gen.16997.1975.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

HXef.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 705KB - Virtual size: 705KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ