SecuriteInfo[.]com[.]Win32[.]RATX-gen[.]26144[.]11553[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

SecuriteInfo.com.Win32.RATX-gen.26144.11553.exe
Size

133KB
MD5

ae1769243232c2a01c187d68a9a18aa6
SHA1

079294036fe8cd046d6c6cd2e31a83cdb732dd3c
SHA256

c847582bdfe604f7a7caca848e6d145761f650b8e4a3ca009beb80c4728363cc
SHA512

6995ad87a0b3742aef03a5fedf6ccc03bda05951b316258efc3849e3bdba9d66eaeb6f58b830e5180075c695ae9cebc297bbbbf2e5493ad1c131ff45479d5ee3
SSDEEP

3072:2CsPEvMCi32nCnQC1Z7qdb6ltgjOQTL0LSAQ+c3oDH:29PkKuMZ7abmgjTkH

Score

N/A

Malware Config

Signatures

Files

SecuriteInfo.com.Win32.RATX-gen.26144.11553.exe
.exe windows x86

d1440b084c32110bfdd59b0a469766a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrChrA
StrChrW
StrCmpNW
StrRChrW

kernel32

ReadFile
GetTempPathW
VirtualAlloc
lstrcatW
EnumResourceTypesW
GetConsoleWindow
GetFileSize
FindFirstFileExW
FindClose
HeapAlloc
HeapFree
GetCommandLineW
CreateFileW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
RaiseException
DecodePointer
WriteConsoleW
CloseHandle
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapReAlloc
HeapSize
GetProcessHeap
LCMapStringW
CompareStringW
GetCommandLineA
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
WriteFile
GetStdHandle
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetCPInfo
LeaveCriticalSection
EnterCriticalSection
SetLastError
GetLastError
RtlUnwind
TerminateProcess
GetCurrentProcess
GetStringTypeW
GetFileType
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleHandleW
WideCharToMultiByte
MultiByteToWideChar
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent

mpr

WNetGetUserA
WNetGetLastErrorA
MultinetGetConnectionPerformanceW
WNetGetResourceInformationW
WNetGetProviderNameW
WNetGetConnectionW

comdlg32

GetSaveFileNameA
PrintDlgExW
GetSaveFileNameW
PrintDlgW
PageSetupDlgA
FindTextA

winmm

waveInStop
mixerGetLineControlsW
waveOutWrite
mmTaskBlock

wsnmp32

ord901
ord105
ord900
ord300
ord102
ord200

ole32

OleCreateLinkToFileEx
ReadFmtUserTypeStg
HWND_UserUnmarshal
IsEqualGUID
BindMoniker
WriteStringStream
StgOpenStorageOnILockBytes
HPALETTE_UserFree
CreateDataCache

resutils

ResUtilFindSzProperty
ResUtilVerifyService
ResUtilSetPropertyParameterBlock
ResUtilGetSzProperty
ResUtilVerifyResourceService
ResUtilStartResourceService
ResUtilSetPrivatePropertyList
ResUtilVerifyPrivatePropertyList
ResUtilSetBinaryValue

oleaut32

VarR4FromBool
VarR4FromDisp
VarUI2FromUI1
VarCyFromUI2
SafeArrayGetIID
VarAbs
VarR4FromDec
OleLoadPicture
VarAnd
VarUI4FromCy

shell32

SHAddToRecentDocs
FindExecutableA
DoEnvironmentSubstW

msi

ord15
ord115
ord14
ord91
ord56
ord158

user32

ShowWindow

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d1440b084c32110bfdd59b0a469766a3

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

kernel32

mpr

comdlg32

winmm

wsnmp32

ole32

resutils

oleaut32

shell32

msi

user32

Sections

.text Size: 100KB - Virtual size: 100KB

.rdata Size: 24KB - Virtual size: 23KB

.data Size: 2KB - Virtual size: 4KB

.gfids Size: 512B - Virtual size: 180B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 100KB - Virtual size: 100KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 2KB - Virtual size: 4KB

.gfids
Size: 512B - Virtual size: 180B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 4KB - Virtual size: 3KB