SecuriteInfo[.]com[.]Win64[.]TrojanX-gen[.]19166[.]23365[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win64.TrojanX-gen.19166.23365.exe
Size

85KB
MD5

772ac4e772851e4fba1e1e765e8952d3
SHA1

52bd9366c2dea99e405dc7f19c9e53c0e630629d
SHA256

69e8299f03ea7c05e3d0ab9757ba340d3d18ac796eef4ebbd6eeabed14e4b444
SHA512

e9149feecc264f71d19c1a8525e6f137291f0b5e0312e4f8b305e484571c1cd67e7896585400c1167da40e9c78b323d86fec5387223f90a6d6e24176799e44ac
SSDEEP

1536:Ro+raIpp8gehaWv1+NPnV8S4WySVT3NfagZcJM//jyVBSthv:Ro+raC1ehaw1GV8S4VSVT31XZH/bLthv

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

SecuriteInfo.com.Win64.TrojanX-gen.19166.23365.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 424KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 80KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE