SecuriteInfo[.]com[.]Win32[.]TrojanX-gen[.]30997[.]6510[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.TrojanX-gen.30997.6510.dll
Size

63KB
MD5

1b0c5ec8e2b44dbb1c5fb27948bd233d
SHA1

2e3fc5ba8e7868e1d107ba64940e7fc8498a2935
SHA256

f4e30f1cbef74af0b122a906a78a7d78cd6d439a06ec50a603136c70e4d0ef05
SHA512

e89e470b7f4c8f654109c4226d51ce905b94ed038fdede50b4d7f3dc08787a18d5031b3d272d4353c6f9987ceffc1c56b6bd9b46c845a9f0686e5ccd54e1f2d6
SSDEEP

1536:vmCauZEszw+xum0oeD1oBD68+bl7QoSh:vmCVwKuJXSBG8cl0v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.TrojanX-gen.30997.6510.dll

Files

SecuriteInfo.com.Win32.TrojanX-gen.30997.6510.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

ClassLibrary2.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ