SecuriteInfo[.]com[.]Variant[.]Zusy[.]448947[.]703[.]8404[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

SecuriteInfo.com.Variant.Zusy.448947.703.8404.exe
Size

120KB
MD5

9405b570c748ba245c630335becb091d
SHA1

05676d9892de08af51598c8b19f1684c8cfd9a65
SHA256

4a8a88e98e5330782ccf7aff16eb0b1f7e35c536b5f628158557358797141a59
SHA512

8110e78b1c0cedcde5db60a612018bdc22e3f2e1bf8c4a4ec4e87ababdfeeca24b11256e91747b28ab5afce0eac46e4d2b2f7ba624a05bce2878c9d4f8c34ffc
SSDEEP

1536:Y4GyOx0qu+1IGdwSEjPW7zr9iyQ641xIon1qbg5B85smnRlMz/sL+y4inSDb7GpC:lZSk+8SEDWPrEPrlfgl0st47D/G+aF

Score

1^/10

Malware Config

Signatures

Files

SecuriteInfo.com.Variant.Zusy.448947.703.8404.exe
.exe windows x86

6611dc162030f0f44b54122ee9c79bbb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

kernel32

lstrcpynW
CompareStringW
GetThreadLocale
MultiByteToWideChar
FreeLibrary
GetProcAddress
LoadLibraryExW
GetSystemDirectoryW
WriteFile
CreateThread
ReadFile
CreateFileW
lstrcatW
GetCommandLineW
LoadLibraryW
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
SetEndOfFile
HeapSize
LCMapStringW
WriteConsoleW
CloseHandle
SetStdHandle
FlushFileBuffers
GetLocaleInfoW
InterlockedExchange
SetConsoleCtrlHandler
HeapReAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapDestroy
HeapCreate
GetCurrentThread
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
lstrcpyW
lstrlenW
GetModuleHandleA
GetModuleFileNameW
GetLastError
GetProcessHeap
HeapAlloc
HeapFree
ExitProcess
TlsAlloc
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidLocale
EnterCriticalSection
LeaveCriticalSection
HeapSetInformation
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
Sleep
GetModuleHandleW
FatalAppExitA
GetStringTypeW
SetFilePointer
RtlUnwind

rtutils

TraceGetConsoleW
RouterLogEventStringA
TracePrintfA
RouterLogRegisterA

odbc32

ord147
ord232
ord29
ord245
ord106

mpr

MultinetGetConnectionPerformanceA
WNetUseConnectionW
WNetGetConnectionA
WNetCancelConnectionA
WNetGetResourceInformationW
WNetCancelConnectionW

mscms

InstallColorProfileW
GetStandardColorSpaceProfileW
RegisterCMMA
OpenColorProfileA
CloseColorProfile

wininet

CreateUrlCacheContainerW
GopherGetAttributeA
InternetHangUp
FtpGetFileW
InternetGetCertByURL
FindNextUrlCacheEntryExW
UnlockUrlCacheEntryStream
FreeUrlCacheSpaceW

user32

LoadStringW

advapi32

RegQueryValueExW
CreateServiceW
RegOpenKeyW
OpenSCManagerW
RegCloseKey
OpenServiceW
DeleteService
CloseServiceHandle

ole32

CoUninitialize
CLSIDFromString
CoInitializeEx

Sections

.text
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6611dc162030f0f44b54122ee9c79bbb

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

kernel32

rtutils

odbc32

mpr

mscms

wininet

user32

advapi32

ole32

Sections

.text Size: 96KB - Virtual size: 96KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 4KB - Virtual size: 11KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 96KB - Virtual size: 96KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 4KB - Virtual size: 11KB

.reloc
Size: 4KB - Virtual size: 3KB