Behavioral task
behavioral1
Sample
SecuriteInfo.com.MBR.Plite-I.23137.2429.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.MBR.Plite-I.23137.2429.exe
Resource
win10v2004-20240226-en
General
-
Target
SecuriteInfo.com.MBR.Plite-I.23137.2429.exe
-
Size
316KB
-
MD5
3ab7e95dea344fe916a047d676cc593f
-
SHA1
de8ec9d08d8c67b9bf7a572b6724fd9878a03caa
-
SHA256
4809fa578a486d7ee663326db4850b2217e863f8350dea9c03b8a89ef667782f
-
SHA512
7078316236cb53b9ad2673044b7b891edc7d7cdcbbc72d957a32749ec0e93e8cac1789bfd689d3745902e53f396f564e3228d54bb735bd95bbbb120f73dbffe8
-
SSDEEP
6144:n7oSvxycu5lLK8ev+qALwX4q6zpn0/4kmn:7oSvxP4h0W7woq6zp8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.MBR.Plite-I.23137.2429.exe
Files
-
SecuriteInfo.com.MBR.Plite-I.23137.2429.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 416KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 225KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE