SecuriteInfo[.]com[.]Win32[.]TrojanX-gen[.]1376[.]19475[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.TrojanX-gen.1376.19475.exe
Size

353KB
MD5

c37847efbb39482fe9e84b578f9d1e40
SHA1

f301668269daab121b2eb6453a297d1c7644553f
SHA256

76b4bf79082396405a61253bdd503e29f78e71e96ccdab713eeac411e45eae0c
SHA512

9115e8c7f19cd761eeb0f0990002dab714e72cbae1d0a8ff00f7a0facfd2895e8b57554d89cae9acaf12e6b647a5d26f222362b12a91546beec62684f82a5e3e
SSDEEP

6144:OodhTZOfLcPBAZkDw4L/BJoJs9svzetS0bWQnFQnqwMSfKfqSONzRu3hoC/i9aE5:/xBAZk3as87u/SvPRu3VI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.TrojanX-gen.1376.19475.exe

Files

SecuriteInfo.com.Win32.TrojanX-gen.1376.19475.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 351KB - Virtual size: 350KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ