SecuriteInfo[.]com[.]Win32[.]RATX-gen[.]20758[.]31464[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.RATX-gen.20758.31464.exe
Size

765KB
MD5

61db67decb4989c4a5a6649974b2105a
SHA1

fc1eba4665ccd5f46d7c138abeb0b757114c08c6
SHA256

fa205475200b1905390d87e73c2eda671794af72b57fa0f5b86eb554c4c2ae72
SHA512

a9d3c44b83242bbae97b3dd64b8a806c151fd7ff41f3cec7ebe8a52232721cb808ca6a6160093b42b305581ce73bcfe331e3d73aab06bad20d6d3d5a64be0476
SSDEEP

12288:So1kAR4UgNhzAFkSF35yrLfv7vFGrJ9muDmFqYejlJka:SAv9gklnX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.RATX-gen.20758.31464.exe

Files

SecuriteInfo.com.Win32.RATX-gen.20758.31464.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

M-h%Cy
Size: 1024B - Virtual size: 632B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 761KB - Virtual size: 760KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ