SecuriteInfo[.]com[.]Trojan[.]PackedNET[.]3247[.]29066[.]16938[.]exe | Triage

Sharing

General

Target

SecuriteInfo.com.Trojan.PackedNET.3247.29066.16938.exe
Size

1.1MB
MD5

86e60136bf56230dcabe7559841cd584
SHA1

bcad517cfc39f78d3341d6f947f5187656bfa26e
SHA256

07f2e4626e3ff2952ff9683c2f88047ae9e272f1301f1b0232c3e6bbb1618fa9
SHA512

ec670afa4ef0a675ac749e345192d59a44d6260cc4fa7f10976be68813c9bde81290e7be476c8471c4ace908158b7613872a98aefc4fea1f13f714bef378927f
SSDEEP

24576:eoVjvmJMUG3s0PVEd7Ng33JTUz/bH8lGMvc+WGn:PB3jA608l7E+WGn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.PackedNET.3247.29066.16938.exe

Files

SecuriteInfo.com.Trojan.PackedNET.3247.29066.16938.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ