SecuriteInfo[.]com[.]W32[.]AIDetect[.]malware1[.]31578[.]3026

General

Target
SecuriteInfo.com.W32.AIDetect.malware1.31578.3026
Size 316KB
Sample220526-yam35sece7
SHA256 faf8a2c9b17e82b98e3c6070519694aaf850deb3b6f01d63f950f2b1efee3470
MD5 ca26df6e05448e8cae04d9e3379fb5c7
SHA1 e9b6d1e44209849510293d8d794113e17d14997a
SHA512 0748b5376f79097e8d5376d22a0544e42d4b21140dd86d0117e5fe6984b52faf602954d572b4eecdc680c43928022557c70e291a4ba84d9df4d419cfda01f198
SSDEEP 6144:NOLui+ttxY/BU2S/OygWAsm0fAuwrfFAlIYonWFhH:MH+LcBUVOyTmtrd5Y3
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

SecuriteInfo.com.W32.AIDetect.malware1.31578.3026

.exe 316KB

SecuriteInfo.com.W32.AIDetect.malware1.31578.3026

IMPHASH aee545a2e2a33f1be0cd9a6e598e2e21
SHA256 faf8a2c9b17e82b98e3c6070519694aaf850deb3b6f01d63f950f2b1efee3470
MD5 ca26df6e05448e8cae04d9e3379fb5c7
SHA1 e9b6d1e44209849510293d8d794113e17d14997a
SHA512 0748b5376f79097e8d5376d22a0544e42d4b21140dd86d0117e5fe6984b52faf602954d572b4eecdc680c43928022557c70e291a4ba84d9df4d419cfda01f198
SSDEEP 6144:NOLui+ttxY/BU2S/OygWAsm0fAuwrfFAlIYonWFhH:MH+LcBUVOyTmtrd5Y3
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

6331

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetConsoleTextAttribute SetDefaultCommConfigW InitializeSListHead SetHandleInformation FreeEnvironmentStringsA GetConsoleAliasesLengthA GetCompressedFileSizeW GlobalAlloc GetLocaleInfoW SetSystemTimeAdjustment GetFileAttributesW SetTimeZoneInformation GetAtomNameW GetModuleFileNameW GetVolumePathNameA WritePrivateProfileStringW CreateJobObjectA GetLastError GetLongPathNameA HeapSize FreeLibrary EnterCriticalSection CreateMemoryResourceNotification GetAtomNameA LoadLibraryA GetProfileStringA BeginUpdateResourceA GetCommMask GlobalFindAtomW GetModuleHandleA VirtualProtect SetCalendarInfoA GetCurrentProcessId SetFileAttributesW LCMapStringW CompareStringW CompareStringA GetTimeZoneInformation ReadFile GetProcessHeap GetConsoleAliasExesLengthA WriteConsoleOutputCharacterA SetLocalTime EnumDateFormatsExW SetFilePointer SetPriorityClass RemoveVectoredExceptionHandler CreateJobSet GetEnvironmentVariableW GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetStdHandle LeaveCriticalSection GetFileType WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode HeapAlloc RtlUnwind HeapFree GetModuleHandleW Sleep GetProcAddress ExitProcess GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime FatalAppExitA InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar VirtualAlloc HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA RaiseException SetConsoleCtrlHandler InterlockedExchange LCMapStringA GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale FlushFileBuffers SetEndOfFile SetEnvironmentVariableA

user32

GetMonitorInfoA GetUserObjectInformationW GetProcessDefaultLayout GetClassLongW

gdi32

GetBoundsRect

advapi32

GetPrivateObjectSecurity EqualSid RegCreateKeyW OpenEventLogW PrivilegedServiceAuditAlarmA GetEventLogInformation

Sharing