SecuriteInfo[.]com[.]Win32[.]PWSX-gen[.]9317[.]6656 | Triage

Sharing

General

Target

SecuriteInfo.com.Win32.PWSX-gen.9317.6656
Size

896KB
MD5

64219e1931808919fd05dcfb458dfc25
SHA1

6adb1561418be08ccaa2e448166bc36673ec60c5
SHA256

ceebb7ca5adbb69127cbf5205e49840c4846cb46e4c5ac568557e7bdf9fe315c
SHA512

9ce694eaf780a4d255e328f527df78c949a5c54b5ab0ba46c9800fd326e9ab0c29eec331a1bc8a8592c159c99fcd69d165baf4ab0d09b2d5ca6540f0e5bd527c
SSDEEP

24576:12n4ze7gcvBx2mYa7sJw3+NHNQA6zqvkiINLYnTI:14gcvL2mT7sJw386pqvkiINc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.PWSX-gen.9317.6656

Files

SecuriteInfo.com.Win32.PWSX-gen.9317.6656
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wGsy.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 894KB - Virtual size: 893KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ