SecuriteInfo[.]com[.]W32[.]AIDetect[.]malware1[.]28408[.]24208

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.W32.AIDetect.malware1.28408.24208
Size 316KB
Sample220219-tlsesabfbk
SHA256 d368129654ed665064a31746b5aee785e7fb5c7989cea3f440ec79bcf98165a5
MD5 cd3da2de8f6da123796991dbc398f8d0
SHA1 e8107c7d9c86dd04928743f1e7e1ede1c3c7894f
SHA512 6d3f8d6c1c9b9bf2b0fc28252fd9cc1762e62a33acd2edc71ab56745533061c6b6a55941b1b3a18e9e0e35241e9c24d85b3739f56172cc720cfb7e642e50cd30
SSDEEP 3072:f5fF+dke2dLC6bYQszhbFaEtzjcRXkzlWkP8sqq28sxkgaBChQJqS4vA:hFJq6bYphxcRXi9Pb2igaXqx
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

SecuriteInfo.com.W32.AIDetect.malware1.28408.24208

.exe 316KB

SecuriteInfo.com.W32.AIDetect.malware1.28408.24208

IMPHASH 2a29a17c115ba1ac6712c8e06f7e1da2
SHA256 d368129654ed665064a31746b5aee785e7fb5c7989cea3f440ec79bcf98165a5
MD5 cd3da2de8f6da123796991dbc398f8d0
SHA1 e8107c7d9c86dd04928743f1e7e1ede1c3c7894f
SHA512 6d3f8d6c1c9b9bf2b0fc28252fd9cc1762e62a33acd2edc71ab56745533061c6b6a55941b1b3a18e9e0e35241e9c24d85b3739f56172cc720cfb7e642e50cd30
SSDEEP 3072:f5fF+dke2dLC6bYQszhbFaEtzjcRXkzlWkP8sqq28sxkgaBChQJqS4vA:hFJq6bYphxcRXi9Pb2igaXqx
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23291

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WaitNamedPipeA GetUserDefaultLCID SetVolumeMountPointW GetComputerNameW GetConsoleAliasesLengthA GetConsoleTitleA ReadConsoleW SetFileTime CreateActCtxW InitializeCriticalSection GlobalAlloc LoadLibraryW GetLocaleInfoW GetVersionExW HeapValidate GetAtomNameW GetMailslotInfo SetConsoleTitleA RaiseException LCMapStringA VerifyVersionInfoW GetStdHandle GetProcAddress GetLongPathNameA InterlockedDecrement GetThreadContext CopyFileA EnterCriticalSection GlobalGetAtomNameA SetFileAttributesA LoadLibraryA WriteConsoleA GetFileType GetDefaultCommConfigA LoadLibraryExA CreateMutexA CreateMailslotA GetStringTypeW GetConsoleTitleW GetFileTime SetCalendarInfoA LocalFree EnumSystemLocalesW SwitchToThread VirtualAlloc MoveFileExA GetVolumeNameForVolumeMountPointA PeekConsoleInputW CreateFileA WriteConsoleW WideCharToMultiByte InterlockedIncrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar Sleep DeleteCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent GetCommandLineA GetStartupInfoA GetCPInfo RtlUnwind LCMapStringW GetModuleHandleW ExitProcess WriteFile GetModuleFileNameA HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize SetHandleCount SetFilePointer CloseHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA GetACP GetOEMCP IsValidCodePage GetLocaleInfoA EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers GetConsoleOutputCP

user32

WindowFromPoint

gdi32

GetCharWidthFloatA

advapi32

ClearEventLogW

winhttp

WinHttpCloseHandle