Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.RATX-gen.30795.11129.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.RATX-gen.30795.11129.exe
Resource
win10v2004-20220812-en
General
-
Target
SecuriteInfo.com.Win32.RATX-gen.30795.11129.exe
-
Size
1.2MB
-
MD5
ba0b9e1f38141b3fb94c910fe1e309b6
-
SHA1
f4f9fad44dee1e3f6c3de40bc12e5263d2e6bca8
-
SHA256
d95e5151d6dd5c5c08ae6a5964361933ad2dc0740082143d9db3dff97088afc5
-
SHA512
b24ad4914220e74e6265650eba160d6e0e276b32c47549c6253c031720d1456e885bfc9b2e2bc491f4fc814ea3ce8b87202d010efb52e77967948f73de2077b2
-
SSDEEP
24576:gxII+O/0r7bYQcOKugE+lBDIPx5qVEZnjrXXJ9dzUmBNEdVOAt:NMwYrOKBjimWp/FzUkNYVOA
Malware Config
Signatures
Files
-
SecuriteInfo.com.Win32.RATX-gen.30795.11129.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ