SecuriteInfo[.]com[.]Win32[.]PWSX-gen[.]15705[.]12320[.]exe | Triage

Sharing

General

Target

SecuriteInfo.com.Win32.PWSX-gen.15705.12320.exe
Size

749KB
MD5

33a57e36b93588f026574b4a3f748443
SHA1

5b29dc2969a512aaf8ecef5bae9c10ab1c9ca571
SHA256

75c96c8d4e720fe1290200707fcca94188b4525dcc8ae2f1dfe49068b7bb3e83
SHA512

e27f4d3a7cf32b4e9be21f1fdc79a25e3318bebb77cae1274281bf26067b15641223c14b4cf67e2af1b6bd5b7f5a57eb9dd384eb6a8219ffb5b3f102928290ae
SSDEEP

12288:ca0NBK+gv85YJ25t9WA02qgwx5zZZ4mIPlcx4Cv1/BBs0i/7rhLl:z0NDAJmh02qgwxzZ4sXBs0IF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.PWSX-gen.15705.12320.exe

Files

SecuriteInfo.com.Win32.PWSX-gen.15705.12320.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 698KB - Virtual size: 697KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ