Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.RATX-gen.10106.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.RATX-gen.10106.exe
Resource
win10v2004-20240226-en
General
-
Target
SecuriteInfo.com.Win32.RATX-gen.10106.17318
-
Size
835KB
-
MD5
fffd00554f9eff0313f8ee3eb48c6673
-
SHA1
ef6bdf24d50780c9d9eda13ef7e226e3f3ac1c0d
-
SHA256
331d7e76582739e0f13e1405aced8b89f977a595c80c2e481ae74b4189141760
-
SHA512
a81404b167bed36133bd17278a2b7155707d91c18d2afeb16f7f9f9c2315a404873454427fa879f534a13d23475eb7c25b3f388c31d8f01bc79171b088c3f9b4
-
SSDEEP
12288:2ipwLdPgOY1kUMuYN/FKaHrQd0S10DsJs2WzCGRmXTWLRcMgEXjwRZQP0eX:2iuIOY2jNIaW0S+7zCw4IbwRaPd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Win32.RATX-gen.10106.17318
Files
-
SecuriteInfo.com.Win32.RATX-gen.10106.17318.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 823KB - Virtual size: 822KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ