SecuriteInfo[.]com[.]MSIL[.]Dropper-ABP[.]10968[.]24361[.]exe | Triage

Sharing

General

Target

SecuriteInfo.com.MSIL.Dropper-ABP.10968.24361.exe
Size

272KB
MD5

3b196fd18fb71b5249c4d88ad469985b
SHA1

42c39449a01c6e5f069e837f85c9811677a1cd7b
SHA256

a20a139df9679bb179af6f1eb0edcb2fe89d4891daf6b0e0c5a35cf4dcea0210
SHA512

c7ad55ec8c9fc78eedef87f1d389619423302e458301c579a9d98025165509f95a093611b7b5915128a86fd3e398be35682d399555fd92423c0ca2b811cb7caf
SSDEEP

6144:lO6v9ukljUnrFHdBLE0PvIC3FnL0n9bOuJ/OE:lO6HA1bLhSOuJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.MSIL.Dropper-ABP.10968.24361.exe

Files

SecuriteInfo.com.MSIL.Dropper-ABP.10968.24361.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 177B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ