Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.PWSX-gen.9055.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.PWSX-gen.9055.exe
Resource
win10v2004-20221111-en
General
-
Target
SecuriteInfo.com.Win32.PWSX-gen.9055.6132
-
Size
37KB
-
MD5
f84e1001ea2b216399a46ce35965faac
-
SHA1
bd0b45d56a3de536b12a3fa3a74dda41d0aa5f38
-
SHA256
f08adc32ee2d3abbf43f765b499596ede30e86702fca799526c778a33005c55f
-
SHA512
ead4eb51e4f4b3d3dba22d845b9ab950bf6fb93b0500f35d06efe3a5b9e4431fd6080f9dc8e587be39b8cc138f3393674e296995a686e8c8d886ffe8015f719c
-
SSDEEP
768:MnxPfcErCH7irUdeYpx6Arxu9lgd00LBMsyFRMIIq3HW9E:a9fvrCH7iVYpBx8lP0LBMseeOT
Malware Config
Signatures
Files
-
SecuriteInfo.com.Win32.PWSX-gen.9055.6132.exe windows x86
681238ff2503974013bbbd16086576ac
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__setusermatherr
towupper
_initterm
__wgetmainargs
__p___winitenv
exit
_XcptFilter
_exit
memset
__p__commode
memmove
__p__fmode
rand
srand
wcstoul
wcstol
malloc
free
wcspbrk
wcsstr
wcsrchr
wcschr
toupper
towlower
_adjust_fdiv
__set_app_type
_except_handler3
_wcsicmp
_controlfp
memcpy
_wcsnicmp
kernel32
EnumSystemCodePagesW
GetConsoleWindow
SetConsoleTitleW
WriteConsoleW
ReadConsoleW
GetConsoleOutputCP
GetConsoleCP
WideCharToMultiByte
MultiByteToWideChar
CompareStringW
GetTimeFormatW
GetDateFormatW
IsBadStringPtrW
lstrlenW
lstrcatW
lstrcpyW
lstrcpynW
SetConsoleDisplayMode
WaitNamedPipeW
VirtualAllocEx
DosDateTimeToFileTime
SetNamedPipeHandleState
GetStdHandle
SetStdHandle
GetCommandLineW
GetEnvironmentVariableW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
SetCurrentDirectoryW
GetCurrentDirectoryW
SearchPathW
CreateFileW
FindClose
FindFirstFileW
GetFileAttributesW
GetFileSize
GetFullPathNameW
GetTempFileNameW
ReadFile
SetFilePointer
WriteFile
GetTempPathW
CloseHandle
DuplicateHandle
GetLastError
WaitForSingleObject
GetCurrentProcess
ExitProcess
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
GetSystemDirectoryW
VirtualAlloc
GetModuleHandleW
LocalAlloc
LocalFree
FormatMessageW
lstrcmpiW
wsock32
ord1109
ord1112
ord1106
ord1101
ord1120
WSASetBlockingHook
WSASetLastError
getservbyport
ord1114
ord1107
ord1108
ord1102
WSAStartup
inet_ntoa
ord1130
msacm32
acmFormatEnumW
acmStreamMessage
acmFilterTagDetailsW
acmStreamClose
acmFormatTagDetailsW
acmDriverMessage
acmMetrics
winspool.drv
EnumPrintProcessorsA
AddFormW
ResetPrinterW
DeletePrinterDataA
EnumPrintProcessorsW
EnumPortsA
DevicePropertySheets
loadperf
LoadPerfCounterTextStringsW
UnloadPerfCounterTextStringsW
LoadPerfCounterTextStringsA
UnloadPerfCounterTextStringsA
avifil32
AVISaveVA
AVIFileInfoW
AVIStreamInfoA
AVIGetFromClipboard
AVIStreamAddRef
AVISaveOptions
AVIFileInit
msvfw32
ICLocate
ICDecompress
DrawDibOpen
avicap32
capGetDriverDescriptionW
rtutils
RouterLogEventStringW
TraceDeregisterW
MprSetupProtocolEnum
TraceDeregisterExW
TraceGetConsoleA
RouterLogEventStringA
TraceDeregisterExA
user32
IsCharAlphaNumericW
LoadStringW
CharUpperBuffW
IsCharAlphaW
wsprintfW
ShowWindow
advapi32
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
shell32
FindExecutableW
SHGetFileInfoW
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ