SecuriteInfo[.]com[.]Trojan[.]Agent[.]GEXU[.]25474[.]5667 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Trojan.Agent.GEXU.25474.5667
Size

752KB
MD5

ecb6e60495b07b9a67103eca4c5cb1cf
SHA1

5a876c41434cc1c4ccbed778c30837f88e2760c9
SHA256

4468778e53ba4a879455abd6060a1f73e57b67a630c2924fff076a388bd30b14
SHA512

6e949c06adea7ca62086c6c2a3b2ce3088632310e9342088a34cc072297d550f04b041373aadea35037a5a5f9e73e92269e9ce754696f8de5658320009ce0e10
SSDEEP

12288:2ZekyF09P8XviDNAiJGSjSLTddtXmNNxjjmyYjzzjHjjjzjvvB8E0j9zBO+NjAyb:1kyFA8X6DNAiJTjQT/lmNPjjmyYjzzjQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.Agent.GEXU.25474.5667

Files

SecuriteInfo.com.Trojan.Agent.GEXU.25474.5667
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 418KB - Virtual size: 417KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ