Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.RATX-gen.15364.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.RATX-gen.15364.exe
Resource
win10v2004-20231020-en
General
-
Target
SecuriteInfo.com.Win32.RATX-gen.15364.16234
-
Size
771KB
-
MD5
8bb3726b8ecf0897aaf8f5704398c2af
-
SHA1
df43668c9ee44766a3394b8946c01e961d796efd
-
SHA256
777c4e75052752ee1f5ccad536e28dc1bc5d8436892bbbcc86a7cf69d581ab8f
-
SHA512
00121b0d16bad23ee7486244d51a0fd2ad50bad6979cff98cfe27216aa359fcaacdf1859b5cafc9ffdc1ced0f6ad04684343566277142a6cac76a167bec2c20a
-
SSDEEP
12288:GhH02ThB9qnzKuGA2NHKGEuvRmVrrA5sQqnCtycaWmo:GhH7vsGhNq4RmV45bqcaS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Win32.RATX-gen.15364.16234
Files
-
SecuriteInfo.com.Win32.RATX-gen.15364.16234.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 769KB - Virtual size: 768KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ