SecuriteInfo[.]com[.]Win32[.]RATX-gen[.]24946[.]23294[.]exe | Triage

Sharing

General

Target

SecuriteInfo.com.Win32.RATX-gen.24946.23294.exe
Size

8.9MB
MD5

dd05330febb9988d2bcdc1d0b6123a2b
SHA1

ec76fe7ff2b09efc07d424b411dc90a528a0bc27
SHA256

d76abbbbe5ab5c33f007a95ac87c2e522eeb446b62ef8d970c4f09022fd77670
SHA512

8685174163858fd0573d326c3b29d426be6d0f176c1fb447b634835335a3d6c419f0e3582e718813f9b24553a80d4d3f9450f517bf42a8ee283ad6d21e2cf070
SSDEEP

196608:RZ+ICBPSX5rcu1/NggOUO6j44epDYV9BQMv0eMnPiMDEhyi:REOTNQxDYfBQlZnl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.RATX-gen.24946.23294.exe

Files

SecuriteInfo.com.Win32.RATX-gen.24946.23294.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8.9MB - Virtual size: 8.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ