Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.RATX-gen.6.2971.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.RATX-gen.6.2971.exe
Resource
win10v2004-20230915-en
General
-
Target
SecuriteInfo.com.Win32.RATX-gen.6.2971.exe
-
Size
267KB
-
MD5
3588601a591bb350581fa5a106db731f
-
SHA1
1c4b62755726646793c3240e9206f98c4b94b91c
-
SHA256
06616799481b155e5794bd4709c2d5cf33a561cb672900107aa0df12090ce2b8
-
SHA512
b63cb213fa8d080ccb178cac94b71f6407e23797c8c6454668286c4635ddcb33b7f5c791e6633538faa25b690800e14fa99fcfaa83e5e6539b58bca541c74b6f
-
SSDEEP
3072:wEvgpVlOeHPHG7OZ6hy2uvnlBrII/J+M:wEvmVlJpj/ly
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Win32.RATX-gen.6.2971.exe
Files
-
SecuriteInfo.com.Win32.RATX-gen.6.2971.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 175KB - Virtual size: 175KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ