SecuriteInfo[.]com[.]Win32[.]TrojanX-gen[.]12595[.]16422[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.TrojanX-gen.12595.16422.exe
Size

831KB
MD5

4a06ba479fd01a62d4d06f17cb7b1e57
SHA1

09811deff30ecbe0a3301101d22e668c573a234a
SHA256

36776fd1a84b600bff010627124a10d6d7b2924e469ba04f0a1ff39f003c129d
SHA512

45222e82fbb86c457a0f5748c0b9b1aab31609c39dd046305f5f2ca4472571eb104c366c2723173098e46d0483d6a2d00530b916930315b32b0d823bf42ebdc4
SSDEEP

12288:dsGH/pauEzNzRaq6XvX1dQA5pzKQ5h40/1ImDky2fiinNw3VIjMPDC:y0/pINzgXtdQZL0NoyAiiN4VpC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.TrojanX-gen.12595.16422.exe

Files

SecuriteInfo.com.Win32.TrojanX-gen.12595.16422.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 814KB - Virtual size: 813KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ