SecuriteInfo[.]com[.]Win32[.]TrojanX-gen[.]10323[.]31552[.]exe | Triage

Sharing

General

Target

SecuriteInfo.com.Win32.TrojanX-gen.10323.31552.exe
Size

816KB
MD5

d553d284c0f6e0fe58b594d4cd5490a4
SHA1

4ffb4034acb76f294f7905a7c56645dc9b806ff2
SHA256

705322479931288652d8dcca3391e35ec17f003f68085455d8f6e2acec7dd2f7
SHA512

ac7241954b8fb9c4dd99edf539aee2bb91e01cea38066a0598fade96af7104ddd3390d3288dea135264248b904eb9df18862668ca577cea7939d50a313497f0c
SSDEEP

12288:vBof5JhauWGMcgFWTQUwpM3eBjjyTQC6YfsHnoFhlwQGefXcO4Xln:KhJheGMtxK3eBj+TbDsHnSEFr11

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.TrojanX-gen.10323.31552.exe

Files

SecuriteInfo.com.Win32.TrojanX-gen.10323.31552.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 810KB - Virtual size: 809KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ