SecuriteInfo[.]com[.]PossibleThreat[.]25391[.]27908[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.PossibleThreat.25391.27908.exe
Size

195KB
MD5

ba9299f5aca9d493bf47a6fc09477aa9
SHA1

ecba5a76e63f1bc51afca348f6878b2ad9d1c811
SHA256

689fc6569e607d322b57868bcea1731e6f96a1b3e61cc0827fdb5e862a2beb30
SHA512

9bc86eba1e6c5772d26070226ec287b46b121154752c98b33cfaf0317613f761d793d4a19526df45301a8deafb88e0cee34013adc538b7df1240893c2fe38682
SSDEEP

1536:O6OId6RN/afO3JjmJXuHcCGfCOQ0sgUi1+JlwdMBSMupfbNQZBSOxXjpFJ3phKVR:3Ora4JjeKQ78tBbKMkE8t3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.PossibleThreat.25391.27908.exe

Files

SecuriteInfo.com.PossibleThreat.25391.27908.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

T+S5
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ