SecuriteInfo[.]com[.]Win32[.]DropperX-gen[.]19748[.]24732[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.DropperX-gen.19748.24732.exe
Size

1.6MB
MD5

0a391949514f69ddc5a2d6e069aac9f1
SHA1

bbf9923aad2b6f289a31e30d54c3f15dde62683a
SHA256

8908d372a1f88846ff5744a6db45bd4350308140e5b878e7452a35a6f5d3d8f7
SHA512

737651bb3d7530fe184f77ebcb69bfa8b26772a37b68c695538ac9c588d684c0b109dbd76bf6948fb3a5fea34b118335923e7a39548b821872662ede5a66f9e8
SSDEEP

49152:56IzFtXRvoFbuTP2UqIYCUITn/lgOFyaHFZCt52:zRvoFyTOUqIvUIblgOYy3C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.DropperX-gen.19748.24732.exe

Files

SecuriteInfo.com.Win32.DropperX-gen.19748.24732.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\PAK_GS\Autoupdate_New_Vesion\Autoupdate_New_Vesion\Autoupdate\obj\Debug\Autoupdate.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ