Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.Malware-gen.21172.28981.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.Malware-gen.21172.28981.exe
Resource
win10v2004-20220812-en
General
-
Target
SecuriteInfo.com.Win32.Malware-gen.21172.28981.exe
-
Size
127KB
-
MD5
548c32a92cd221f0b0a1e5ab389bf5af
-
SHA1
ba4191ec1939c16ad6a700f5200c5ac84ab9efa7
-
SHA256
ce1c120571a06830f12a0a82741d00806cf18817be88c9458cf8349737c77166
-
SHA512
d6a09567b49075fd45bd2e52b40387570ced13d00fd28f474b15cf72a7c177a09c0573a61e9639d83859f01eb80f297d3c67ec883cf7997d453554c824f4fa82
-
SSDEEP
3072:BZ9IFcF7Hcy5kK9gzZi+U7NpT8lVmklRK2p:BZ9IFiHcy5s+Jpla
Malware Config
Signatures
Files
-
SecuriteInfo.com.Win32.Malware-gen.21172.28981.exe.exe windows x86
3ca6aee10ae08673a459e8a56b64f707
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord410
ord17
shlwapi
wnsprintfW
StrTrimA
PathRenameExtensionA
PathIsRootA
StrChrIA
UrlIsOpaqueA
StrCSpnIW
PathIsRelativeA
PathSearchAndQualifyW
PathRemoveBlanksW
PathBuildRootW
kernel32
HeapAlloc
HeapFree
GetProcessHeap
GetTimeFormatW
MulDiv
ReadFile
CreateFileW
lstrcmpW
MultiByteToWideChar
lstrlenW
VirtualAlloc
FindClose
GetLocalTime
CloseHandle
lstrcpyW
IsProcessorFeaturePresent
SetStdHandle
CreateFileA
GetLocaleInfoW
InterlockedExchange
FreeLibrary
Sleep
FatalAppExitA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapDestroy
HeapCreate
GetCurrentThread
InterlockedDecrement
IsValidCodePage
SetLastError
InterlockedIncrement
TlsFree
FindFirstFileW
TlsGetValue
TlsAlloc
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
WriteFile
SetFilePointer
DeleteCriticalSection
SetHandleCount
RtlUnwind
InitializeCriticalSectionAndSpinCount
LoadLibraryW
SetConsoleCtrlHandler
GetLastError
GetModuleHandleW
GetProcAddress
LeaveCriticalSection
EnterCriticalSection
GetCurrentProcess
TerminateProcess
DecodePointer
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
HeapSetInformation
GetCommandLineA
GetModuleFileNameW
GetStdHandle
GetFileType
WriteConsoleW
HeapReAlloc
HeapSize
IsValidLocale
SetEndOfFile
LCMapStringW
GetStringTypeW
GetUserDefaultLCID
GetFileSize
GetDateFormatW
GetCommandLineW
ExitProcess
CreateHardLinkA
WriteProfileSectionW
SetConsoleMode
WritePrivateProfileSectionA
CreateDirectoryExW
GlobalMemoryStatus
SetCalendarInfoW
GetCPInfo
GetACP
TlsSetValue
GetOEMCP
GetLocaleInfoA
EnumSystemLocalesA
GetCurrentThreadId
mswsock
MigrateWinsockConfiguration
EnumProtocolsA
GetAddressByNameW
GetNameByTypeA
EnumProtocolsW
resutils
ResUtilGetEnvironmentWithNetName
ResUtilGetSzProperty
ResUtilGetDwordValue
ResUtilSetPrivatePropertyList
ResUtilEnumResources
loadperf
LoadPerfCounterTextStringsW
LoadPerfCounterTextStringsA
UnloadPerfCounterTextStringsW
UnloadPerfCounterTextStringsA
user32
CreateWindowExW
MessageBoxW
GetSystemMetrics
GetDlgItemTextW
SetDlgItemTextW
SendMessageW
UpdateWindow
SetWindowTextW
WinHelpW
ShowWindow
CheckMenuItem
MonitorFromRect
DispatchMessageW
GetWindowRect
SetMenuItemBitmaps
DefDlgProcA
GetMenu
TabbedTextOutW
SetLastErrorEx
GetDlgCtrlID
LoadStringW
GetMessageExtraInfo
EndDialog
GetDlgItem
GetWindowTextW
LoadIconW
RegisterClassExW
IsDialogMessageW
SetDlgItemInt
LoadAcceleratorsW
TranslateMessage
SetFocus
GetClientRect
LoadCursorW
GetParent
DialogBoxParamW
PostMessageW
LoadImageW
RegisterWindowMessageW
GetMessageW
SetActiveWindow
TranslateAcceleratorW
GetWindowTextLengthW
DestroyWindow
GetMonitorInfoW
GetDlgItemInt
gdi32
GetTextExtentPoint32W
GetTextMetricsW
StartPage
DeleteDC
CreateFontIndirectW
GetDeviceCaps
DeleteObject
SelectObject
SetMapMode
ExtTextOutW
GetTextExtentExPointW
StartDocW
EndDoc
EndPage
comdlg32
PrintDlgW
FindTextW
GetOpenFileNameW
GetSaveFileNameW
ChooseFontW
ReplaceTextW
advapi32
IsTextUnicode
shell32
ShellAboutW
DragAcceptFiles
Sections
.text Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ