SecuriteInfo[.]com[.]W32[.]AIDetect[.]malware2[.]21339[.]11866

General

Target
SecuriteInfo.com.W32.AIDetect.malware2.21339.11866
Size 528KB
Sample220825-e38e1afebr
SHA256 ea4589d40229cad6e722078d08366bf57c268b04ff185a525560edbc4e027708
MD5 3308ffcc7ff34e2edbbe396c59a9bfea
SHA1 de6e3d9a845c6d96ae1dee70f31a870a61eed25c
SHA512 9a5de5b9d1cb7be29e2ac3db92c95c4bce1407972fc0b7a00fff8b26ff70df2ab886ebc107a8c5cbcfd5a39f8016d6c6d6dc84572212a0b49597f5d2c00699d0
SSDEEP 6144:ERxfQUb5nsdV4t3ErEa7ghse+9AUZ2nT3oWA4T7yVqACuTEuPcASlkIDOF:4x9sdV4t30Ea7ghs7KUZq32CuTE0FOS
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

SecuriteInfo.com.W32.AIDetect.malware2.21339.11866

.exe 528KB

SecuriteInfo.com.W32.AIDetect.malware2.21339.11866

IMPHASH 29a25d759346600f219a273b92909295
SHA256 ea4589d40229cad6e722078d08366bf57c268b04ff185a525560edbc4e027708
MD5 3308ffcc7ff34e2edbbe396c59a9bfea
SHA1 de6e3d9a845c6d96ae1dee70f31a870a61eed25c
SHA512 9a5de5b9d1cb7be29e2ac3db92c95c4bce1407972fc0b7a00fff8b26ff70df2ab886ebc107a8c5cbcfd5a39f8016d6c6d6dc84572212a0b49597f5d2c00699d0
SSDEEP 6144:ERxfQUb5nsdV4t3ErEa7ghse+9AUZ2nT3oWA4T7yVqACuTEuPcASlkIDOF:4x9sdV4t30Ea7ghs7KUZq32CuTE0FOS
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

4396

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

FindWindowW FindWindowA GetWindowDC GetForegroundWindow ShowWindow

kernel32

GetModuleHandleExW WriteConsoleW CreateFileW ReadConsoleW ReadFile CloseHandle GetCurrentProcess GetCurrentProcessId GetConsoleCP SetConsoleTitleA GetConsoleWindow UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW HeapReAlloc RaiseException InterlockedPushEntrySList InterlockedFlushSList RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer GetStdHandle WriteFile GetModuleFileNameW ExitProcess DecodePointer GetCommandLineA GetCommandLineW GetCurrentThread HeapAlloc HeapFree GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType OutputDebugStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW GetProcessHeap SetConsoleCtrlHandler FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx HeapSize

Name

.text

Size

380KB

Virtual Size

379KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

55KB

Virtual Size

55KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

75KB

Virtual Size

80KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.00cfg

Size

512B

Virtual Size

270B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

765B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

SecuriteInfo.com.W32.AIDetect.malware2.21339.11866

user32

kernel32