SecuriteInfo[.]com[.]Win32[.]MalwareX-gen[.]25969[.]15080[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.MalwareX-gen.25969.15080.exe
Size

148KB
MD5

340efe524c957a5c254f567c30b14b7d
SHA1

1f5e93a9e1d901c43d10c8f65ec2c98225fc8838
SHA256

1d8ad7a7f0b07b83f26162edda497eedc59071b880f379d0d382e174ec83c6af
SHA512

ef3e7fb603ddf3dfa25eab76b122c95e55a5deb585ec02b634be0bcfe412b32fd17a16210878e9f42914bf931f16fcf52516cd69a11fa3b1198e9e77cfc7ca69
SSDEEP

3072:aku32+azLpGGADxtpfgVsoHdBPYGG121RjF7GDzYlRg1+7nku32+azLpGGADxtpC:akuG+apADxjfgZox21RjF7G8lg+jkuG5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.MalwareX-gen.25969.15080.exe

Files

SecuriteInfo.com.Win32.MalwareX-gen.25969.15080.exe
.exe windows:4 windows x86 arch:x86

c39234ff2245e05d4a92d8a0891a5638

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
__vbaEnd
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaStrCmp
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaInputFile
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFPException
ord645
_CIlog
__vbaFileOpen
__vbaNew2
ord571
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaStrToAnsi
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ