SecuriteInfo[.]com[.]Win32[.]Malware-gen[.]32489[.]22181

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.Malware-gen.32489.22181
Size

140KB
MD5

a8e5eb2ba610e5986590bf4affbbebc8
SHA1

a0d605c03beabc9fda183d1f9e9ee6103afcc1a9
SHA256

704a2324ef55c297542d69a016ebb88551a8e7723a6d76b51297f7a41542c6dc
SHA512

340af7c3552659d96f06e413d69ed1d86941286ba37cce6fbb97e8b74a3a65aca9849d5466d3d84e56b486bef6d49641ef6bfe9fe7a8bd76232279fae4f42ced
SSDEEP

3072:EmJzYfS9Mme73ZMhVF1pv7m9tVQvIE8Zi:EmJcfSQ3ZM/F1pEmi

Score

1^/10

Malware Config

Signatures

Files

SecuriteInfo.com.Win32.Malware-gen.32489.22181
.exe windows x86

f3ae3a11a9e7f4629e662e145d65cea3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord410
ord17

imm32

ImmEnumRegisterWordW
ImmSetCompositionStringA
ImmGetIMCLockCount
ImmCreateIMCC
ImmGetConversionListA
ImmGetIMEFileNameA

shlwapi

wnsprintfW

kernel32

LCMapStringEx
GetUserDefaultLocaleName
GetLocaleInfoEx
CompareStringEx
GetDateFormatEx
GetTimeFormatEx
HeapReAlloc
HeapSize
SetStdHandle
GetConsoleCP
FlushFileBuffers
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FreeLibrary
InterlockedExchange
Sleep
FatalAppExitA
GetModuleHandleW
TerminateProcess
GetCurrentProcess
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WideCharToMultiByte
IsValidLocaleName
GetEnvironmentStringsW
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetModuleFileNameA
GetCurrentThreadId
GetCurrentThread
InterlockedIncrement
SetLastError
GetStartupInfoW
InitOnceExecuteOnce
DeleteCriticalSection
SetFilePointerEx
SetFilePointer
ReadConsoleW
GetConsoleMode
RtlUnwind
InitializeCriticalSectionAndSpinCount
WriteFile
LoadLibraryW
LoadLibraryExW
OutputDebugStringW
SetConsoleCtrlHandler
LeaveCriticalSection
EnterCriticalSection
AreFileApisANSI
GetProcAddress
InterlockedDecrement
GetLastError
IsProcessorFeaturePresent
DecodePointer
EncodePointer
IsDebuggerPresent
GetCommandLineA
WriteConsoleW
GetModuleHandleExW
SetEndOfFile
GetModuleFileNameW
GetFileType
lstrcpyW
CloseHandle
GetLocalTime
FindClose
VirtualAlloc
lstrlenW
MultiByteToWideChar
lstrcmpW
CreateFileW
ReadFile
MulDiv
GetTimeFormatW
GetProcessHeap
HeapFree
HeapAlloc
FindFirstFileW
GetFileSize
GetDateFormatW
GetCommandLineW
ExitProcess
EnumSystemLocalesEx
GetStringTypeW
GetTickCount64
FreeEnvironmentStringsW
GetStdHandle

mscms

UninstallColorProfileW
SpoolerCopyFileEvent
SetColorProfileHeader
GetPS2ColorRenderingDictionary
SelectCMM
OpenColorProfileW

shell32

DragAcceptFiles
ShellHookProc
ShellExecuteExA
Shell_NotifyIconA
CommandLineToArgvW
ShellAboutW

setupapi

SetupDiCreateDeviceInterfaceRegKeyA
SetupQueueRenameSectionW
SetupDiGetDeviceInterfaceAlias
SetupGetInfFileListA
SetupDiGetHwProfileList

wininet

GopherCreateLocatorW
InternetGetLastResponseInfoW
FindNextUrlCacheContainerA
InternetCheckConnectionA
FtpGetCurrentDirectoryA

user32

LoadAcceleratorsW
SetDlgItemInt
GetMenu
IsDialogMessageW
RegisterClassExW
LoadIconW
GetWindowTextW
GetDlgItem
EndDialog
LoadStringW
ShowWindow
CreateWindowExW
MessageBoxW
TranslateMessage
GetDlgItemTextW
SetDlgItemTextW
SendMessageW
UpdateWindow
SetWindowTextW
WinHelpW
GetMonitorInfoW
CheckMenuItem
MonitorFromRect
DispatchMessageW
TranslateAccelerator
ScrollWindowEx
DdeSetQualityOfService
CheckRadioButton
GetClientRect
SetFocus
LoadCursorW
GetParent
DialogBoxParamW
PostMessageW
LoadImageW
RegisterWindowMessageW
GetMessageW
SetActiveWindow
GetDlgItemInt
TranslateAcceleratorW
DestroyWindow
GetSystemMetrics
GetWindowTextLengthW

gdi32

ExtTextOutW
GetTextExtentExPointW
StartDocW
EndPage
SetMapMode
EndDoc
GetTextExtentPoint32W
GetTextMetricsW
StartPage
DeleteDC
CreateFontIndirectW
GetDeviceCaps
DeleteObject
SelectObject

comdlg32

FindTextW
GetOpenFileNameW
ReplaceTextW
GetSaveFileNameW
PrintDlgW
ChooseFontW

advapi32

IsTextUnicode

Sections

.text
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f3ae3a11a9e7f4629e662e145d65cea3

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

imm32

shlwapi

kernel32

mscms

shell32

setupapi

wininet

user32

gdi32

comdlg32

advapi32

Sections

.text Size: 106KB - Virtual size: 106KB

.rdata Size: 18KB - Virtual size: 18KB

.data Size: 4KB - Virtual size: 16KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 9KB - Virtual size: 8KB

.text
Size: 106KB - Virtual size: 106KB

.rdata
Size: 18KB - Virtual size: 18KB

.data
Size: 4KB - Virtual size: 16KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 9KB - Virtual size: 8KB