SecuriteInfo[.]com[.]Win32[.]TrojanX-gen[.]4983[.]29177[.]exe | Triage

Sharing

General

Target

SecuriteInfo.com.Win32.TrojanX-gen.4983.29177.exe
Size

12.6MB
MD5

f134475ebee920480ccdd56cc41c84cc
SHA1

85d8595940e98556246a27d2ea376636fa57238c
SHA256

4ac269a19fbe26769c846742af30aec4de81abd75bb3bc546410fc83917c98ff
SHA512

267ff856a1963db423c185ed9b0c53f57780937838af526719289932f4accb6ff9f506b7b210d01b16eee155fad0f8696f93b150d0523129b40beaef4187c087
SSDEEP

393216:tb0luzfV0luzfNEWpRRVQta1aCdPGdNd:lLfVLfiWpWSaQ+dNd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.TrojanX-gen.4983.29177.exe

Files

SecuriteInfo.com.Win32.TrojanX-gen.4983.29177.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Relax\Game\Code VLTK\code\autoupdate\autoupdate_ctc\Autoupdate\obj\Debug\Autoupdate.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12.5MB - Virtual size: 12.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ