SecuriteInfo[.]com[.]Win32[.]PWSX-gen[.]20132[.]3337 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.PWSX-gen.20132.3337
Size

635KB
MD5

5fe4e1859b1bd6b42919a10ef385cde3
SHA1

00582d66344bad1a7b69106bc77c7e4142bcbf53
SHA256

9f6eb9b6b3bf92a75e32208dd51ce6307fa5ccdae27f02f0c7e2712544c2c04f
SHA512

064b4674fa4bad11781cb12c404703b539e5c12bd888a097a9caba5ec4b23d40b9edd47dcf52f87c499fa76640c2ff7ebd1775ca71d4505e3783bfc8c2411e22
SSDEEP

12288:7XVUHAjgfo3wIuzPuVAiy7VyaJDIJQOMv/o/bigpWxir3undwDS:+HAqo3wwFsVyaJ82LA/Gykqm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.PWSX-gen.20132.3337

Files

SecuriteInfo.com.Win32.PWSX-gen.20132.3337
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

noFt.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 632KB - Virtual size: 632KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ