SecuriteInfo[.]com[.]Win32[.]TrojanX-gen[.]11904[.]16034[.]exe | Triage

Sharing

General

Target

SecuriteInfo.com.Win32.TrojanX-gen.11904.16034.exe
Size

55KB
MD5

59ed620b90318c77ec464b22ab444334
SHA1

af50740c95c6c296eac9a374514ffc587de01a56
SHA256

59e406a485ddf4939e97ec5d08595fe343ab970681ee7d02c2f7dfb97e75e956
SHA512

bd5bd7758a114a389dcf26487a41d08c02097dab7eeda6037b269bd63b2d6893df91a995156be5496179fa18615614e70c000faed10bd6620269b5ed9aea5efe
SSDEEP

1536:5q9FvQrpx6oqiJJ778QBY7+hIgnbR0Q16WZWd/s4uEpyXn8+8bfYRC4+vRt6yNOZ:89FvQrpx6oqiJJ7780YuRH16qc/vuWyv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.TrojanX-gen.11904.16034.exe

Files

SecuriteInfo.com.Win32.TrojanX-gen.11904.16034.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\S\Documents\Visual Studio 2019\Projects\T1_Install\obj\Debug\T1_Net.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ