SecuriteInfo[.]com[.]FileRepMalware[.]31201[.]5678 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.FileRepMalware.31201.5678
Size

285KB
MD5

b30141c538097e5b9f3744942723338a
SHA1

10aa14d8f60a425944cbd94cf55ae439fae8b2d7
SHA256

1ad82a4e7f70ad09c9ff67446d0bdd9a900e998c88888ed1509fa6a604ce2f4e
SHA512

d23d08563ad40ea0c093ff229e1c1174063ddd66ac1d587dd93e450439df36ac9d18af11d97d0709cbfba4cc1982efbc221fb70a97b012324d9a79e68549381b
SSDEEP

6144:G8pYPZfeML11ct6pL0/zevXhFxCBw6v7/DFjFSjttUW6IjxCfOZ:paPZbUtk0eXzQO6jDFjFSjttUW6IjxC4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.FileRepMalware.31201.5678

Files

SecuriteInfo.com.FileRepMalware.31201.5678
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

I;sO
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ