SecuriteInfo[.]com[.]MSIL[.]Agent[.]TXGD[.]tr[.]dldr[.]26263[.]6028[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.MSIL.Agent.TXGD.tr.dldr.26263.6028.exe
Size

223KB
MD5

21898907ebb89805e0d7541868ad9d0a
SHA1

82d9a16958884e26071f9985ddbfae356d7b1627
SHA256

0af532574ecd403c4bf93bb65d50d8c42091f870cf585e956a3bf7243d7f7bae
SHA512

7364d47dc56ff5da88efcd097593c02a13bd8a3e3f071fbb38b9d222461a9d265ee4f385b6408458100f993eb36ca692d97eb5d3a75db9c0f89f239276127dca
SSDEEP

6144:afL5pFFVNyZjJJNc877Z4+1mvQOk3iZR26:IH7VGny8l1mv1k3iR1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.MSIL.Agent.TXGD.tr.dldr.26263.6028.exe

Files

SecuriteInfo.com.MSIL.Agent.TXGD.tr.dldr.26263.6028.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ