Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win64.SpywareX-gen.3520.8144.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win64.SpywareX-gen.3520.8144.exe
Resource
win10v2004-20240709-en
General
-
Target
SecuriteInfo.com.Win64.SpywareX-gen.3520.8144.exe
-
Size
4.5MB
-
MD5
e299e50bda0214f3f8c8bc4931300be4
-
SHA1
30a3e8da33affd7f923bfe11792d15dcb7f2979d
-
SHA256
d2deafa45a9dd46c17bfd896f8051ab12f7ca71bef24781d81f19a681466470b
-
SHA512
021b48b4346ec724e1bdc3d12078b720a5fcec9ab25c1e88445f06b7ffbafe5962aa10c15464d9c7a54884ee1bc74def23a482773c135c77beda4622a7c1fc72
-
SSDEEP
24576:l79xJQyTj34T+cQfo1axRaeBAIAscO2oIPPeZpPCGxeAUkQi7kbyPOeegJGs3KsK:
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Win64.SpywareX-gen.3520.8144.exe
Files
-
SecuriteInfo.com.Win64.SpywareX-gen.3520.8144.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 4.5MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ