SecuriteInfo[.]com[.]Win32[.]RATX-gen[.]28046[.]3429[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.RATX-gen.28046.3429.exe
Size

14.7MB
MD5

1054513d78d30bb3895caf7263822bd8
SHA1

952751c225b1ec5b39640a5611fac374f42a6d34
SHA256

be36b65ee8717f81b7d084d1a9b5073af0e8151a3c2b17dc86886ace2abfd07d
SHA512

811a6cd085fad018e7ec60e116b75b75fcfe632687609b10da2b55220b1e111119e69be89a07417064a2d244886b072fce72ad1e93ffadc6cfcce94e8ed64de2
SSDEEP

196608:GHd6DOuDUI/6yocMIH6NhsfqxOLoeUwKj4+3X3bA4IQu14GzK5b:id6lH/sIaEfqAoeUwI4W3lu14GzKp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.RATX-gen.28046.3429.exe

Files

SecuriteInfo.com.Win32.RATX-gen.28046.3429.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

*+\rpx"
Size: 6.3MB - Virtual size: 6.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 8.4MB - Virtual size: 8.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ