SecuriteInfo[.]com[.]Win32[.]PWSX-gen[.]28867[.]21061[.]exe

General

Target
SecuriteInfo.com.Win32.PWSX-gen.28867.21061.exe
Size 222KB
Sample221229-cy6phafc3w
SHA256 e7c3cff0ae5c18797117676076ccd7c501fc47d2e0da7e61826ed234eb4bed43
MD5 30c8660605b151540f9b0072d6600503
SHA1 3a9a44923592823bf83bd47d89736931f1502065
SHA512 69367cdecfd63f9af80a52b73226567e83f5819782e318c242d7b6e44906b51378e3f2ffb68a0c2a1eecda9ce2260f1bce4cfb853a502750160673e388195464
SSDEEP 3072:9lUzLCv5/a2Zb+H59cMlzAD7gdxAIRwD3tdmdhxH:ALCVPZb+H9zEUxAOi3tm
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

SecuriteInfo.com.Win32.PWSX-gen.28867.21061.exe

.exe 222KB

SecuriteInfo.com.Win32.PWSX-gen.28867.21061.exe

IMPHASH a80d0dc9c10015fdaac0b0fe8d06a5a8
SHA256 e7c3cff0ae5c18797117676076ccd7c501fc47d2e0da7e61826ed234eb4bed43
MD5 30c8660605b151540f9b0072d6600503
SHA1 3a9a44923592823bf83bd47d89736931f1502065
SHA512 69367cdecfd63f9af80a52b73226567e83f5819782e318c242d7b6e44906b51378e3f2ffb68a0c2a1eecda9ce2260f1bce4cfb853a502750160673e388195464
SSDEEP 3072:9lUzLCv5/a2Zb+H59cMlzAD7gdxAIRwD3tdmdhxH:ALCVPZb+H9zEUxAOi3tm
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15114

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetConsoleAliasW GetModuleHandleA CreateDirectoryExA GetLogicalDriveStringsW ReadConsoleInputW GetTempPathW GetSystemDirectoryW DisconnectNamedPipe OutputDebugStringW GetProcAddress LocalAlloc MoveFileWithProgressW GetBinaryTypeW SearchPathA GetCommandLineA InterlockedIncrement VerifyVersionInfoA ConvertDefaultLocale FindNextFileW FindFirstVolumeW LocalFree GlobalFlags ExitThread FindResourceW SetFileTime InterlockedCompareExchange AddVectoredExceptionHandler lstrcatA SetFilePointer CreateActCtxA GlobalFindAtomA CopyFileW FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesW AreFileApisANSI InterlockedExchangeAdd SetLastError HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA WideCharToMultiByte LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

user32

CharUpperBuffA

Sharing