Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.RATX-gen.6117.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.RATX-gen.6117.exe
Resource
win10v2004-20230703-en
General
-
Target
SecuriteInfo.com.Win32.RATX-gen.6117.26429
-
Size
683KB
-
MD5
49bdc4bdaf5c44085438b0d3233b3ef9
-
SHA1
5fd73d318f5abc616aa98e5231ca468976e83051
-
SHA256
dfba6d9c101eb1273aaf962047fd958424bfac70a1162c2a910640981a23d054
-
SHA512
016999902c853664cac2732ae511d8712faf973e80c2cda8d0964f973c9f7262e4539bdae28fe3ea5ea6673aa216e2ced3a38ac764027e444782434dee4848ae
-
SSDEEP
12288:00Dl+C42xjWhRn+fqz6Hvq7gJODTLDKqPSeiSHCdtKUJRVfhDQP3M:tmn+fqz6Pq7gJODPxSe1HStKU3VfdQP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Win32.RATX-gen.6117.26429
Files
-
SecuriteInfo.com.Win32.RATX-gen.6117.26429.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 615KB - Virtual size: 614KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ