SecuriteInfo[.]com[.]W32[.]Injector[.]ESFO[.]tr[.]32659[.]9052[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.W32.Injector.ESFO.tr.32659.9052.exe
Size

91KB
MD5

767983b7e4fce3a20d688c30474b9b4f
SHA1

900bd4da0ab0208c34584f80ad4f0b6674bdd511
SHA256

a9d8bdb0abe0166d4ac3f48f2e7744025b4818b3fac9b5c928d7b1c4f7b9dccc
SHA512

0695bf82343200f8f5aadf94904c5c0ef1c07f9b8a73b16c648430918d57a048af9f0537fd88495dd59dc159d54ebb676acc45328bed4af4267f8f2c44030b96
SSDEEP

1536:H14aIb6ZFmVaLnLBarSkCijPMM7EoX66pCzkpzdeb+0cHpioh9FeFVAsWoPHBcdy:VaGLBarrDx66UzkpT0+ioheFfPHwgrL

Score

N/A

Malware Config

Signatures

Files

SecuriteInfo.com.W32.Injector.ESFO.tr.32659.9052.exe
.exe windows x86

9363092ec64c2f7f36f1540abd988e37

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

imm32

ImmGetRegisterWordStyleW
ImmReleaseContext
ImmLockIMC
ImmGetOpenStatus
ImmEnumRegisterWordA
ImmRequestMessageA

shlwapi

PathSetDlgItemPathA
SHRegQueryUSValueA
StrChrW
UrlIsNoHistoryA
PathIsUNCA
PathFileExistsA
SHRegWriteUSValueA
UrlApplySchemeA
StrStrIA

kernel32

HeapReAlloc
EnumSystemCodePagesW
GetTimeFormatW
GetDateFormatW
lstrcpyW
VirtualAlloc
GetLocalTime
ReadFile
GetFileSize
CreateFileW
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
RaiseException
CloseHandle
WriteConsoleW
EncodePointer
HeapSize
GetProcessHeap
LCMapStringW
GetStringTypeW
GetFileType
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapAlloc
HeapFree
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
WriteFile
GetStdHandle
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
DecodePointer
SetLastError
GetLastError
RtlUnwind
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetOEMCP

wininet

GetUrlCacheEntryInfoA
GopherFindFirstFileW
GopherOpenFileW
FindNextUrlCacheEntryExW
GetUrlCacheEntryInfoW
InternetGetCookieW
InternetFindNextFileA

gdi32

OffsetWindowOrgEx
TextOutW
SetViewportOrgEx
MoveToEx
SetTextColor
SetBkMode
SetBkColor
SelectObject
OffsetRgn
LineTo
GetTextExtentPointW
GetStockObject
Ellipse
DeleteObject
DeleteDC
CreatePen
CreateFontIndirectW
CreateEllipticRgn
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
GetCharacterPlacementW
DeleteEnhMetaFile
GdiSetBatchLimit
CreateScalableFontResourceW
EndDoc
GetClipBox
CreatePolygonRgn
GdiStartPageEMF

pdh

PdhGetDefaultPerfCounterA
PdhEnumObjectsW
PdhGetCounterInfoA
PdhLookupPerfNameByIndexA
PdhGetFormattedCounterArrayW
PdhSetQueryTimeRange
PdhVbGetCounterPathElements

mscms

CheckBitmapBits
GetPS2ColorSpaceArray
SetColorProfileElementSize
DisassociateColorProfileFromDeviceA
SelectCMM

mpr

WNetEnumResourceW
WNetGetUserW
WNetGetNetworkInformationA
WNetOpenEnumW
MultinetGetConnectionPerformanceA
WNetAddConnection3A
WNetDisconnectDialog1A

mapi32

ord164
ord46
ord151
ord21
ord123
ord67

user32

KillTimer
SetWindowPos
ShowWindow
CreateWindowExW
LoadMenuW
PostQuitMessage
DefWindowProcW
DispatchMessageW
TranslateMessage
GetMessageW
LoadStringW
SetMenu
CheckMenuItem
EnableMenuItem
GetSubMenu
UpdateWindow
GetWindowLongW
GetDC
ReleaseDC
BeginPaint
EndPaint
SetWindowRgn
InvalidateRect
SetWindowTextW
GetWindowRect
MessageBoxW
MapWindowPoints
GetSysColor
GetSysColorBrush
FillRect
LoadIconW
LoadCursorW
CheckMenuRadioItem
SetWindowLongW
RegisterClassW
SetTimer

comdlg32

ChooseFontW

shell32

ShellAboutW

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9363092ec64c2f7f36f1540abd988e37

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

imm32

shlwapi

kernel32

wininet

gdi32

pdh

mscms

mpr

mapi32

user32

comdlg32

shell32

Sections

.text Size: 58KB - Virtual size: 58KB

.rdata Size: 29KB - Virtual size: 28KB

.data Size: 2KB - Virtual size: 5KB

.gfids Size: 512B - Virtual size: 224B

.text
Size: 58KB - Virtual size: 58KB

.rdata
Size: 29KB - Virtual size: 28KB

.data
Size: 2KB - Virtual size: 5KB

.gfids
Size: 512B - Virtual size: 224B