General

  • Target
    SecuriteInfo.com.Win32.Application.Agent.H3XSG6.10460.29227.exe
  • Size 22.3MB
  • Sample241019-s1bvxatclb
  • SHA256 3b328d4649eae2d574eab7ef71cf38a249b78d8b5fed20b3a1c549c361580027
  • MD5 SHA1 SHA512 SSDEEP
Score
5/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • SecuriteInfo.com.Win32.Application.Agent.H3XSG6.10460.29227.exe
    .exe 22.3MB
  • out.upx
    .exe 26.4MB

SecuriteInfo.com.Win32.Application.Agent.H3XSG6.10460.29227.exe

  • SHA256 3b328d4649eae2d574eab7ef71cf38a249b78d8b5fed20b3a1c549c361580027
  • MD5 SHA1 SHA512 SSDEEP
  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
Digest
1f:5f:ec:37:1f:67:df:eb:19:a4:e7:77:8c:7f:a8:b7:43:ad:e8:31:1b:89:7b:0e:bd:1d:1c:bb:09:df:7f:d1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=202431257D,CN=REMOTE UTILITIES PTE. LTD.,O=REMOTE UTILITIES PTE. LTD.,L=Singapore,ST=Singapore,C=SG,1.2.840.113549.1.9.1=#0c18696e666f4072656d6f74657574696c69746965732e636f6d,1.3.6.1.4.1.311.60.2.1.3=#13025347,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Minor OS version
1
Major OS version
5
Entry point
28607568
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths