SecuriteInfo[.]com[.]Win32[.]PWSX-gen[.]22336[.]13850[.]exe | Triage

Sharing

General

Target

SecuriteInfo.com.Win32.PWSX-gen.22336.13850.exe
Size

253KB
MD5

9c62b2cace38bbed4e624bbd2d36ef42
SHA1

d2a023ed67b4fb0e77e54ea835f1cec763e03e48
SHA256

08c1d7fdcdebaa5fe76dd7c18d96ba32ee6577a43f3d4ed68d0b360531980f8c
SHA512

79bd7c8ee9815ed5bf49737b6e260f989ba75f62d54171b038b6b4acbe8b043b6d0ea82877dd59aba7901e017293dd605d2af9b771d4b6ba375a9966bead81ea
SSDEEP

6144:wnvS4O81rXwZ6+FHuDcudzEZlOt1hgpA8yaiT:YXxbO6+FHuFelOWHtiT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.PWSX-gen.22336.13850.exe

Files

SecuriteInfo.com.Win32.PWSX-gen.22336.13850.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\f6qr9f24bqq\obj\Release\Targetter.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 251KB - Virtual size: 250KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ