SecuriteInfo[.]com[.]Win32[.]MalwareX-gen[.]28458[.]5499[.]exe | Triage

Sharing

General

Target

SecuriteInfo.com.Win32.MalwareX-gen.28458.5499.exe
Size

2.7MB
MD5

722a4d19e3fda023c604e7c9f8064489
SHA1

9f9d9c645674b1d3700484a390a815361d169af5
SHA256

9cfafb8be5a89904c2d1a093d987db5cf51c0c8df87844b3d668e93ab9e48adc
SHA512

1f53f15ebb6289537d7afa38d53b93f16730e5e7f8ebe199fe890cdde8167121df999440924d25943d6982949f7ad582200a6467695a63b24376f7553e960625
SSDEEP

49152:7wO/8sIQDnc7A1qp+JyHPcrtiyGSdowOL/Y+0rVFILs3AHgGJ4hDOG:/fIScc1a+8HP8tD+wOLwlAJHgtyG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.MalwareX-gen.28458.5499.exe

Files

SecuriteInfo.com.Win32.MalwareX-gen.28458.5499.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

AetherEye.pdb

Imports

mscoree

_CorExeMain

Sections

(kqJ9'W
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 231KB - Virtual size: 231KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 175KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ