SecuriteInfo[.]com[.]Win32[.]Malware-gen[.]8217[.]11029[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.Malware-gen.8217.11029.exe
Size

140KB
MD5

7f49a4641292720e320601122938b839
SHA1

f055946679e323998362d34e71d1f6d88cbb2be7
SHA256

2dd6126d4d708ae962e695b25be05dd5f4f0ab51cc1aaea1533338347c459c2d
SHA512

cc3fdcf114f3f86775d93f8e084517614d6f425985d5fe34c2eb1cdddbcb261cd19b1f26d184d5a4130f8ab66c04d3a88df6fba7719b612fad525cbddd650c98
SSDEEP

3072:KmJzYfS9Mme73ZMhVF1pv7m9tVQvIE8Zi:KmJcfSQ3ZM/F1pEmi

Score

1^/10

Malware Config

Signatures

Files

SecuriteInfo.com.Win32.Malware-gen.8217.11029.exe
.exe windows x86

f3ae3a11a9e7f4629e662e145d65cea3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord410
ord17

imm32

ImmEnumRegisterWordW
ImmSetCompositionStringA
ImmGetIMCLockCount
ImmCreateIMCC
ImmGetConversionListA
ImmGetIMEFileNameA

shlwapi

wnsprintfW

kernel32

LCMapStringEx
GetUserDefaultLocaleName
GetLocaleInfoEx
CompareStringEx
GetDateFormatEx
GetTimeFormatEx
HeapReAlloc
HeapSize
SetStdHandle
GetConsoleCP
FlushFileBuffers
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FreeLibrary
InterlockedExchange
Sleep
FatalAppExitA
GetModuleHandleW
TerminateProcess
GetCurrentProcess
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WideCharToMultiByte
IsValidLocaleName
GetEnvironmentStringsW
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetModuleFileNameA
GetCurrentThreadId
GetCurrentThread
InterlockedIncrement
SetLastError
GetStartupInfoW
InitOnceExecuteOnce
DeleteCriticalSection
SetFilePointerEx
SetFilePointer
ReadConsoleW
GetConsoleMode
RtlUnwind
InitializeCriticalSectionAndSpinCount
WriteFile
LoadLibraryW
LoadLibraryExW
OutputDebugStringW
SetConsoleCtrlHandler
LeaveCriticalSection
EnterCriticalSection
AreFileApisANSI
GetProcAddress
InterlockedDecrement
GetLastError
IsProcessorFeaturePresent
DecodePointer
EncodePointer
IsDebuggerPresent
GetCommandLineA
WriteConsoleW
GetModuleHandleExW
SetEndOfFile
GetModuleFileNameW
GetFileType
lstrcpyW
CloseHandle
GetLocalTime
FindClose
VirtualAlloc
lstrlenW
MultiByteToWideChar
lstrcmpW
CreateFileW
ReadFile
MulDiv
GetTimeFormatW
GetProcessHeap
HeapFree
HeapAlloc
FindFirstFileW
GetFileSize
GetDateFormatW
GetCommandLineW
ExitProcess
EnumSystemLocalesEx
GetStringTypeW
GetTickCount64
FreeEnvironmentStringsW
GetStdHandle

mscms

UninstallColorProfileW
SpoolerCopyFileEvent
SetColorProfileHeader
GetPS2ColorRenderingDictionary
SelectCMM
OpenColorProfileW

shell32

DragAcceptFiles
ShellHookProc
ShellExecuteExA
Shell_NotifyIconA
CommandLineToArgvW
ShellAboutW

setupapi

SetupDiCreateDeviceInterfaceRegKeyA
SetupQueueRenameSectionW
SetupDiGetDeviceInterfaceAlias
SetupGetInfFileListA
SetupDiGetHwProfileList

wininet

GopherCreateLocatorW
InternetGetLastResponseInfoW
FindNextUrlCacheContainerA
InternetCheckConnectionA
FtpGetCurrentDirectoryA

user32

LoadAcceleratorsW
SetDlgItemInt
GetMenu
IsDialogMessageW
RegisterClassExW
LoadIconW
GetWindowTextW
GetDlgItem
EndDialog
LoadStringW
ShowWindow
CreateWindowExW
MessageBoxW
TranslateMessage
GetDlgItemTextW
SetDlgItemTextW
SendMessageW
UpdateWindow
SetWindowTextW
WinHelpW
GetMonitorInfoW
CheckMenuItem
MonitorFromRect
DispatchMessageW
TranslateAccelerator
ScrollWindowEx
DdeSetQualityOfService
CheckRadioButton
GetClientRect
SetFocus
LoadCursorW
GetParent
DialogBoxParamW
PostMessageW
LoadImageW
RegisterWindowMessageW
GetMessageW
SetActiveWindow
GetDlgItemInt
TranslateAcceleratorW
DestroyWindow
GetSystemMetrics
GetWindowTextLengthW

gdi32

ExtTextOutW
GetTextExtentExPointW
StartDocW
EndPage
SetMapMode
EndDoc
GetTextExtentPoint32W
GetTextMetricsW
StartPage
DeleteDC
CreateFontIndirectW
GetDeviceCaps
DeleteObject
SelectObject

comdlg32

FindTextW
GetOpenFileNameW
ReplaceTextW
GetSaveFileNameW
PrintDlgW
ChooseFontW

advapi32

IsTextUnicode

Sections

.text
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f3ae3a11a9e7f4629e662e145d65cea3

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

imm32

shlwapi

kernel32

mscms

shell32

setupapi

wininet

user32

gdi32

comdlg32

advapi32

Sections

.text Size: 106KB - Virtual size: 106KB

.rdata Size: 18KB - Virtual size: 18KB

.data Size: 4KB - Virtual size: 16KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 9KB - Virtual size: 8KB

.text
Size: 106KB - Virtual size: 106KB

.rdata
Size: 18KB - Virtual size: 18KB

.data
Size: 4KB - Virtual size: 16KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 9KB - Virtual size: 8KB