SecuriteInfo[.]com[.]Win32[.]TrojanX-gen[.]14690[.]9602[.]exe | Triage

Sharing

General

Target

SecuriteInfo.com.Win32.TrojanX-gen.14690.9602.exe
Size

1.2MB
MD5

4fa341fcbec27c54abd2eccd99562692
SHA1

2735f93d187942b768f699d85bad7e8d77518f62
SHA256

7c66e9147e47b282041a50ef341156d0d05141564ce84173447ca1d3e91152c2
SHA512

54c021dbc1232fa4082aa64044495ab9000158b3f24359edc05762f09b6733b6c20d7833ca101235695121653e9f5743f4f0237062331eae585099f5fba6065b
SSDEEP

24576:eukdQSdVBC3xwVz+uy2/QH8AO0TXgi2vafw+Jwz/S/6OYu:WqhmBocldYw+W7SCO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.TrojanX-gen.14690.9602.exe

Files

SecuriteInfo.com.Win32.TrojanX-gen.14690.9602.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\epenko\Desktop\Source\epex.mordhau.recode\obj\Debug\epex.mordhau.recode.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ