SecuriteInfo[.]com[.]Heur[.]25013[.]20090[.]exe | Triage

Sharing

General

Target

SecuriteInfo.com.Heur.25013.20090.exe
Size

631KB
MD5

26aa84b983564ccd62143b164ffa7f62
SHA1

df39b8d79ca797d9dc594f62d705682b4ec7d634
SHA256

3029eb76575a110e9bfeadcee488cb4db00d25da6d8529e48d49f2fee0770f80
SHA512

ebc73b0faeb5886ff5910fc69d93293de875098ffb66037508e70f1a8c922312952a5d8341aa856787e4ffa670fc01fb40b288c067dba4aaec5e7c886c74bcf6
SSDEEP

12288:mZMAvNlMfHJ2zJWfs+Pk8xVv5x9+AeVmxgU5hT3ETB778Qm:jAw2zJWfs+s8HjnXgWhUTB0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
SecuriteInfo.com.Heur.25013.20090.exe

Files

SecuriteInfo.com.Heur.25013.20090.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

QFnZ.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 628KB - Virtual size: 628KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ