SecuriteInfo[.]com[.]Win32[.]TrojanX-gen[.]24885[.]25657[.]exe

General

Target
SecuriteInfo.com.Win32.TrojanX-gen.24885.25657.exe
Size 3.2MB
Sample240318-bxdrnaea3w
SHA256 223ca31f57ae2a9b8a4cd1e7eaa6c9b9d5506e8d6ab53e56ec976bf88465a39e
MD5 76a40ba1272e483cdebb46af89c083ef
SHA1 3206ff7f204e001e194ad988cf08bcb5d4cd31e8
SHA512 cc1a5afce501a3b163983577c78786a1e37db1f8959e5d7305bdd9a4237b61244f7919fd8813b2320fb0fa5a42ee8743928f72d0220d911ff3f757f501bae11c
SSDEEP 49152:dXN3u+RkDMYW0p/+TXLpp344216ZWcBwl6w/tibDmrVTSr:pUTVF/+TXLpp3442AFu/AbGS
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.TrojanX-gen.24885.25657.exe

File Explorer

SecuriteInfo.com.Win32.TrojanX-gen.24885.25657.exe

.exe 3.2MB

SecuriteInfo.com.Win32.TrojanX-gen.24885.25657.exe

IMPHASH 2eabe9054cad5152567f0699947a2c5b
SHA256 223ca31f57ae2a9b8a4cd1e7eaa6c9b9d5506e8d6ab53e56ec976bf88465a39e
MD5 76a40ba1272e483cdebb46af89c083ef
SHA1 3206ff7f204e001e194ad988cf08bcb5d4cd31e8
SHA512 cc1a5afce501a3b163983577c78786a1e37db1f8959e5d7305bdd9a4237b61244f7919fd8813b2320fb0fa5a42ee8743928f72d0220d911ff3f757f501bae11c
SSDEEP 49152:dXN3u+RkDMYW0p/+TXLpp344216ZWcBwl6w/tibDmrVTSr:pUTVF/+TXLpp3442AFu/AbGS
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4059136

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

Size

607KB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

zbtdmmre

Size

2.5MB

Virtual Size

2.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

obtnwfnx

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.taggant

Size

8KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

SecuriteInfo.com.Win32.TrojanX-gen.24885.25657.exe

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

SecuriteInfo.com.Win32.TrojanX-gen.24885.25657.exe

kernel32

generic