SecuriteInfo[.]com[.]Win32[.]Malware-gen[.]2944[.]5284[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.Malware-gen.2944.5284.exe
Size

127KB
MD5

4926e703888c6492d564fa66417fddeb
SHA1

7082e1a55d8380f55d49f3655839f50d1007b990
SHA256

c36155c751af32c3c05cf00662ef6948676878895062f6770a8548c227d99dec
SHA512

a47bb415b20ed3514bc947f0ef54201e8ee951b07ef0be685ce819eba40e7ea734ccb5c3ec7fac9966f708216f0cfee05f915f5c46720a0d32723af769d48b8b
SSDEEP

3072:GZ9IFcF7Hcy5kK9gzZi+U7NpT8lVmklRK2p:GZ9IFiHcy5s+Jpla

Score

1^/10

Malware Config

Signatures

Files

SecuriteInfo.com.Win32.Malware-gen.2944.5284.exe
.exe windows x86

3ca6aee10ae08673a459e8a56b64f707

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord410
ord17

shlwapi

wnsprintfW
StrTrimA
PathRenameExtensionA
PathIsRootA
StrChrIA
UrlIsOpaqueA
StrCSpnIW
PathIsRelativeA
PathSearchAndQualifyW
PathRemoveBlanksW
PathBuildRootW

kernel32

HeapAlloc
HeapFree
GetProcessHeap
GetTimeFormatW
MulDiv
ReadFile
CreateFileW
lstrcmpW
MultiByteToWideChar
lstrlenW
VirtualAlloc
FindClose
GetLocalTime
CloseHandle
lstrcpyW
IsProcessorFeaturePresent
SetStdHandle
CreateFileA
GetLocaleInfoW
InterlockedExchange
FreeLibrary
Sleep
FatalAppExitA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapDestroy
HeapCreate
GetCurrentThread
InterlockedDecrement
IsValidCodePage
SetLastError
InterlockedIncrement
TlsFree
FindFirstFileW
TlsGetValue
TlsAlloc
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
WriteFile
SetFilePointer
DeleteCriticalSection
SetHandleCount
RtlUnwind
InitializeCriticalSectionAndSpinCount
LoadLibraryW
SetConsoleCtrlHandler
GetLastError
GetModuleHandleW
GetProcAddress
LeaveCriticalSection
EnterCriticalSection
GetCurrentProcess
TerminateProcess
DecodePointer
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
HeapSetInformation
GetCommandLineA
GetModuleFileNameW
GetStdHandle
GetFileType
WriteConsoleW
HeapReAlloc
HeapSize
IsValidLocale
SetEndOfFile
LCMapStringW
GetStringTypeW
GetUserDefaultLCID
GetFileSize
GetDateFormatW
GetCommandLineW
ExitProcess
CreateHardLinkA
WriteProfileSectionW
SetConsoleMode
WritePrivateProfileSectionA
CreateDirectoryExW
GlobalMemoryStatus
SetCalendarInfoW
GetCPInfo
GetACP
TlsSetValue
GetOEMCP
GetLocaleInfoA
EnumSystemLocalesA
GetCurrentThreadId

mswsock

MigrateWinsockConfiguration
EnumProtocolsA
GetAddressByNameW
GetNameByTypeA
EnumProtocolsW

resutils

ResUtilGetEnvironmentWithNetName
ResUtilGetSzProperty
ResUtilGetDwordValue
ResUtilSetPrivatePropertyList
ResUtilEnumResources

loadperf

LoadPerfCounterTextStringsW
LoadPerfCounterTextStringsA
UnloadPerfCounterTextStringsW
UnloadPerfCounterTextStringsA

user32

CreateWindowExW
MessageBoxW
GetSystemMetrics
GetDlgItemTextW
SetDlgItemTextW
SendMessageW
UpdateWindow
SetWindowTextW
WinHelpW
ShowWindow
CheckMenuItem
MonitorFromRect
DispatchMessageW
GetWindowRect
SetMenuItemBitmaps
DefDlgProcA
GetMenu
TabbedTextOutW
SetLastErrorEx
GetDlgCtrlID
LoadStringW
GetMessageExtraInfo
EndDialog
GetDlgItem
GetWindowTextW
LoadIconW
RegisterClassExW
IsDialogMessageW
SetDlgItemInt
LoadAcceleratorsW
TranslateMessage
SetFocus
GetClientRect
LoadCursorW
GetParent
DialogBoxParamW
PostMessageW
LoadImageW
RegisterWindowMessageW
GetMessageW
SetActiveWindow
TranslateAcceleratorW
GetWindowTextLengthW
DestroyWindow
GetMonitorInfoW
GetDlgItemInt

gdi32

GetTextExtentPoint32W
GetTextMetricsW
StartPage
DeleteDC
CreateFontIndirectW
GetDeviceCaps
DeleteObject
SelectObject
SetMapMode
ExtTextOutW
GetTextExtentExPointW
StartDocW
EndDoc
EndPage

comdlg32

PrintDlgW
FindTextW
GetOpenFileNameW
GetSaveFileNameW
ChooseFontW
ReplaceTextW

advapi32

IsTextUnicode

shell32

ShellAboutW
DragAcceptFiles

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3ca6aee10ae08673a459e8a56b64f707

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

shlwapi

kernel32

mswsock

resutils

loadperf

user32

gdi32

comdlg32

advapi32

shell32

Sections

.text Size: 100KB - Virtual size: 99KB

.rdata Size: 16KB - Virtual size: 16KB

.data Size: 4KB - Virtual size: 16KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 100KB - Virtual size: 99KB

.rdata
Size: 16KB - Virtual size: 16KB

.data
Size: 4KB - Virtual size: 16KB

.reloc
Size: 5KB - Virtual size: 4KB