SecuriteInfo[.]com[.]Win32[.]BackdoorX-gen[.]24037[.]1276[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.BackdoorX-gen.24037.1276.exe
Size

8.8MB
MD5

f3d6a09990a1a260ba1a2e2219c0fb1c
SHA1

6aaa740506cc409c8a98b73b432926d60fef9e84
SHA256

8a6660dbf1aa0f542aa69455825fd0512587e6beac3f88c99be0e2414d584bb5
SHA512

f21a94715e05ce1ad69eb10062fbae5da2e91be172d4a4dfaaa3b45e9ce1c2304d8bf3565dd4b52e7cf509d40ca8538dca16907d3c7e9b1f44e5f0c675c33b20
SSDEEP

98304:gzqG0mWZDotHa7vgbDpfKclYlMWm3Z12SYVAqA8/QY6hlCabD/91v2DYrU4zOMio:gOG0TEHiwDylMV292qh/cMabDTiLE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.BackdoorX-gen.24037.1276.exe

Files

SecuriteInfo.com.Win32.BackdoorX-gen.24037.1276.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 5.4MB - Virtual size: 5.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 183KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 66KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 68B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 371KB - Virtual size: 371KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ