Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.InjectorX-gen.29410.5091.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.InjectorX-gen.29410.5091.exe
Resource
win10v2004-20221111-en
General
-
Target
SecuriteInfo.com.Win32.InjectorX-gen.29410.5091.exe
-
Size
333KB
-
MD5
3182bef520a1e9f52be3755c25e4c3b0
-
SHA1
1829dd90a63bf67dceb3f6cc41c8aace8e7e31ad
-
SHA256
e7eca366a9467420ba42645aac451e02d0f009c6f6dfe3a47349510de0bbfb96
-
SHA512
bdc8e908d5bcdd52ccf880d11d863d76ee28d9201c51972cd547e94887e32ba986329d5c7615fbb1f01e8e2af5123e419a411dfaadd8b9b5a2d8e586c947e962
-
SSDEEP
6144:Qoe9deNmwPG6xFMCgRlXXLRLh7mzMb1iRWuuu9toDVdmqQL17EMRvM/gRUuJ5dX:Qoe9deAwRxFMCgRlXXLRLh7mgb1xuuuz
Malware Config
Signatures
Files
-
SecuriteInfo.com.Win32.InjectorX-gen.29410.5091.exe.exe windows x86
564bcacae786416f84da16d9ec6493d1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathFileExistsW
PathFileExistsA
SHRegEnumUSKeyA
UrlUnescapeA
SHRegOpenUSKeyA
kernel32
HeapSize
SetFilePointerEx
GetStdHandle
SetStdHandle
GetCommandLineW
GetEnvironmentVariableW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
SetCurrentDirectoryW
GetCurrentDirectoryW
SearchPathW
CreateFileW
FindClose
FindFirstFileW
GetFileAttributesW
GetFileSize
GetFullPathNameW
GetTempFileNameW
ReadFile
SetFilePointer
WriteFile
GetTempPathW
CloseHandle
DuplicateHandle
GetLastError
WaitForSingleObject
GetCurrentProcess
ExitProcess
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
GetSystemDirectoryW
VirtualAlloc
GetModuleHandleW
LocalAlloc
LocalFree
FormatMessageW
lstrcmpiW
lstrcpynW
lstrcpyW
lstrcatW
lstrlenW
IsBadStringPtrW
GetDateFormatW
GetTimeFormatW
CompareStringW
MultiByteToWideChar
WideCharToMultiByte
EnumSystemCodePagesW
GetConsoleCP
GetConsoleOutputCP
ReadConsoleW
WriteConsoleW
FlushFileBuffers
SetConsoleTitleW
GetConsoleWindow
InterlockedFlushSList
GetFileSizeEx
SetConsoleCtrlHandler
GetProcessHeap
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
OutputDebugStringW
GetFileType
HeapAlloc
HeapFree
InterlockedPushEntrySList
TerminateProcess
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
SetLastError
EnterCriticalSection
LeaveCriticalSection
HeapReAlloc
GetCurrentThread
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
GetCommandLineA
GetModuleHandleExW
GetModuleFileNameW
RaiseException
EncodePointer
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetConsoleMode
GetConsoleScreenBufferInfo
DecodePointer
RtlUnwind
msi
ord82
ord126
ord137
ord72
ord8
ord20
ord161
ord168
rtutils
TracePrintfA
LogEventW
TraceDumpExW
LogErrorA
LogEventA
TraceDumpExA
mswsock
inet_network
SetServiceW
GetNameByTypeW
SetServiceA
mapi32
ord11
ord126
ord22
rpcrt4
RpcEpRegisterW
RpcAsyncCancelCall
NdrStubInitializeMarshall
NdrSimpleTypeMarshall
NdrRpcSsDefaultAllocate
NdrStubInitialize
ws2_32
setsockopt
WPUCompleteOverlappedRequest
accept
setupapi
SetupCopyErrorA
InstallHinfSectionA
SetupFreeSourceListA
SetupQueryFileLogA
SetupAddInstallSectionToDiskSpaceListW
SetupDiGetActualSectionToInstallW
SetupDiGetDeviceInstallParamsW
user32
CharUpperBuffW
ShowWindow
wsprintfW
IsCharAlphaNumericW
IsCharAlphaW
LoadStringW
advapi32
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
shell32
SHGetFileInfoW
FindExecutableW
Sections
.text Size: 286KB - Virtual size: 285KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ