SecuriteInfo[.]com[.]Win32[.]Evo-gen[.]20864[.]8288[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.Evo-gen.20864.8288.exe
Size

6.6MB
MD5

82d4abe8aa131739ea5926e2ebb9cb23
SHA1

5ff5298043cd0075ac22a3d97690e559c0ee48fb
SHA256

d2252feef4542512dbda023654f257523b96d8765c5bb19ca246a2d3e25b6f41
SHA512

264046e85f90bb139f72935c7d7b04da4589148bcd374696917c13ca4a413d386abcb78f9ed8cdf401dd0ae3145af4ea4eb40fa599054f9ab6fa01e85727e7a2
SSDEEP

49152:+gxTtCyxFJL80HmoC+XR0yIFvyiyTOGcoTOU2CCGbJKQ/b3x6qv1ua6Hm:XxH/moJGymvy8oTOU2sbb/TxdNu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.Evo-gen.20864.8288.exe

Files

SecuriteInfo.com.Win32.Evo-gen.20864.8288.exe
.exe windows:5 windows x86 arch:x86

8a44aa26dc3c2edb37bd497e13ed5164

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

GetVersionExA
GetVersion
ord8
ord12
ord16
LoadLibraryA
GetProcAddress

ole32

gdi32

wininet

shell32

DragQueryFileA

rasapi32

winspool.drv

OpenPrinterA

Sections

.text
Size: - Virtual size: 435KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 826KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 305KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.`lu
Size: - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.`E8
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Jo,
Size: 6.6MB - Virtual size: 6.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ