SecuriteInfo[.]com[.]Win32[.]PWSX-gen[.]10617[.]3858[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.PWSX-gen.10617.3858.exe
Size

644KB
MD5

3d5ac85829e8b64458d0743297681fc8
SHA1

48291b2504da0c192e8298aa72f2f49dcc426467
SHA256

a83c288ee02e53fc492939cbba3b33070d3e6ba9ae70053936b6dcd72a2c8828
SHA512

fcab69a23a729ce4498135c4e85ed8d06fec1d43ef1a98d1498240cc53e2680784c6a37f03e928a22d64842e84b35125597997e2d1d9d84ecd05e71ba18ad303
SSDEEP

12288:EUb8qb9a7o3z2PClnPoSol8SSomUEkWQmBtp3ROIskdd1SjgRh:EUwW9a7a26npSaLlBOIfddwU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.PWSX-gen.10617.3858.exe

Files

SecuriteInfo.com.Win32.PWSX-gen.10617.3858.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

JkFS.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 641KB - Virtual size: 641KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ