Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win64.RansomX-gen.15559.6870.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win64.RansomX-gen.15559.6870.exe
Resource
win10v2004-20230621-en
General
-
Target
SecuriteInfo.com.Win64.RansomX-gen.15559.6870.exe
-
Size
13.3MB
-
MD5
ca3b422bf506e55786f22001937b851c
-
SHA1
267e1e29d2503eee091f504b910d94811971004c
-
SHA256
a74af26ef8ee96f7389a7d945c2c76774f63046bd86e1bdad5049e86da63d62b
-
SHA512
bb8b6bb956ab94205c7945dc533c4ef2f293570de9367fca63aa0ecac597d2ca172fa4a755fdf45e3bba361a63eee115d79e69473b99da1291449c320dad6cc2
-
SSDEEP
393216:aFtb4jstNiP1h3Vu3D7lIWCisPhk4pvIu5eMnmL+s1:aFtbGstNidtVEL+5vIu5XnY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Win64.RansomX-gen.15559.6870.exe
Files
-
SecuriteInfo.com.Win64.RansomX-gen.15559.6870.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 13.3MB - Virtual size: 13.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ