SecuriteInfo[.]com[.]Win32[.]TrojanX-gen[.]3539[.]17237[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.TrojanX-gen.3539.17237.exe
Size

226KB
MD5

eaf0a116d2c0b858f5322689e3db4523
SHA1

3c1a01cfd5007d9c8ca8efd0101855139fb15cce
SHA256

be0aaa509ac870009966587b081e90af6ee68ebecb1b2b37182a4ce3c98cae2a
SHA512

584855cdad97df0f2ee3f4068134a53c4ac2868acec3a66e6e9cfd5b3c3edf19efe9a88a83dd5bcadf85b52937698e450ffd0b507e800b11492657c318b11ca8
SSDEEP

6144:dy3jsOd/3gztboXYsO1hcWmtWACsI7wDdTqHSeLonz0:c3gz0YsO1hcWmtWACsI7wDdTqHSeLonz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.TrojanX-gen.3539.17237.exe

Files

SecuriteInfo.com.Win32.TrojanX-gen.3539.17237.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

ws"x
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ