SecuriteInfo[.]com[.]Win32[.]Evo-gen[.]15464[.]19850[.]exe | Triage

Sharing

General

Target

SecuriteInfo.com.Win32.Evo-gen.15464.19850.exe
Size

1.0MB
MD5

6d362753dce141d1177ce73b14fa572d
SHA1

574fc684ce0c09b50ca5e6e603d2dae72d3fa0af
SHA256

dc4bcfa9aaf97ad72e0360b8e7a4b17392482f8b1f9ae597c3670c9cb3215660
SHA512

8193e76e330e1741b805cfc73dad845f9eba37f43af5486330a90fd7632c4e3654c448ca82ab53237e5b875a470736fd241d5ec791eb0b3e88ec4673f946f3ad
SSDEEP

24576:vwd4XMf2FyhaG9dNygHwrH7ydifo4asHhfstbNnjbgIx3rLCA/9J:vq4DKNyWwDuifyg6bNnjbLrWA/v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.Evo-gen.15464.19850.exe

Files

SecuriteInfo.com.Win32.Evo-gen.15464.19850.exe
.exe windows:5 windows x86 arch:x86

0ffacaa5916e809890e37542ad1c481f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msimg32

TransparentBlt

msvcr100

_controlfp_s

mfc100

ord4344

kernel32

FreeLibrary

user32

GetFocus

gdi32

GetTextExtentPoint32A

shell32

SHGetSpecialFolderPathA

msvcp100

?_Xout_of_range@std@@YAXPBD@Z

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

advapi32

RegDeleteKeyA

Sections

.text
Size: 163KB - Virtual size: 368KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 879KB - Virtual size: 880KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ