Security[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Security.exe
Size

426KB
MD5

16ef6975c3a2e7b86768238a5b6018b6
SHA1

f54dc4177eb5bbddaf66e26caa4151992512c47a
SHA256

1e7ab51a52876da677eb5d322831347902118ac65a77b7f80a8fc8c020756416
SHA512

bf60d10f78b8ce04b471b733f298c07a7da759a24e4811d7b6352aae533ff1ee37fd62387cff12e80245a7b9a1d28197e1cc114ab0a7124cf226486c92378fe9
SSDEEP

12288:g/SpR/kiGwGEwNpOPBXK2tmtocGjPrW/XbQa:g/sR/kiGE3tK2tzcGe/XZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Security.exe

Files

Security.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 424KB - Virtual size: 423KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ