Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win64.PWSX-gen.12130.21806.exe
Resource
win7-20240215-en
General
-
Target
SecuriteInfo.com.Win64.PWSX-gen.12130.21806.exe
-
Size
3.1MB
-
MD5
f247bd6cdeaef76c9627f3279ce50ad3
-
SHA1
1603ae614a65a6a3fc97ce0a62e4d33f8defe2e3
-
SHA256
80f6c8b05627d848eebeee9f5c479ce2904d5bdd8be21035026455ac2edc251c
-
SHA512
1eb1f3f24ec3160c3e8e32a1fba0cc83cf61e0e8a0c2feb5feac90f4e3ebbeee662c09bb325de9b5b25c3d143e588b48bef3fb9109ab03a25ce352882a645ec5
-
SSDEEP
49152:EzBfc7D4ttU0VhmH6UxVfh6hSI2nmKCL+/yIM1VplSXMaMpk2j1ypUzRqGfNiAa/:EzuGs36Kme/vfqypGNpakvIVwDAhD9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Win64.PWSX-gen.12130.21806.exe
Files
-
SecuriteInfo.com.Win64.PWSX-gen.12130.21806.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ