Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.RATX-gen.17652.4535.exe
Resource
win7-20230831-en
General
-
Target
SecuriteInfo.com.Win32.RATX-gen.17652.4535.exe
-
Size
462KB
-
MD5
e85b4b21d184186073106595d4d5d529
-
SHA1
7df6898ea8d144c69051e940e6a570b9fadec75c
-
SHA256
1290bedfe236cb0894d63d8ea46b115ff26bd7694a16ae290fdcbc91291096a4
-
SHA512
d75dcfd013dfdc238aa56775261308d2fc8ae619b91aa07c785d5d9eb927b2f7992b3df90e3dfbe27b71758b1d1135dc5140ed1ca6d78e1f68d77bc139de87a9
-
SSDEEP
6144:pF4NswZPZSCou149vUE4qCOXWhErUjRuDHTch83vsUXJi9IAIABG3wIHdDqNtNq:pmNswZBSCVfKWhw5Xca3T5i9IxDy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Win32.RATX-gen.17652.4535.exe
Files
-
SecuriteInfo.com.Win32.RATX-gen.17652.4535.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 308KB - Virtual size: 307KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 153KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ