SecuriteInfo[.]com[.]Win32[.]Malware-gen[.]24995[.]11744

Sharing

Copy URL

Twitter E-mail

General

Target

SecuriteInfo.com.Win32.Malware-gen.24995.11744
Size

127KB
MD5

e1e12c689a097150a1ee437692566b5b
SHA1

bd28b27cdbccbad418138bff708cbd2aea49e130
SHA256

966238dc57cb161cb1c468926e09d86e60a2880947165126da1176b35863e236
SHA512

82a8542010b941872fb1d3c86212e3611685fea77cdc477407bf6e54ed7c29a8100abb11653d94aa45b103c56176a2eed09fce98ab363535b2b082dcaf877f1f
SSDEEP

3072:FZ9IFcF7Hcy5kK9gzZi+U7NpT8lVmklRK2p:FZ9IFiHcy5s+Jpla

Score

1^/10

Malware Config

Signatures

Files

SecuriteInfo.com.Win32.Malware-gen.24995.11744
.exe windows x86

3ca6aee10ae08673a459e8a56b64f707

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord410
ord17

shlwapi

wnsprintfW
StrTrimA
PathRenameExtensionA
PathIsRootA
StrChrIA
UrlIsOpaqueA
StrCSpnIW
PathIsRelativeA
PathSearchAndQualifyW
PathRemoveBlanksW
PathBuildRootW

kernel32

HeapAlloc
HeapFree
GetProcessHeap
GetTimeFormatW
MulDiv
ReadFile
CreateFileW
lstrcmpW
MultiByteToWideChar
lstrlenW
VirtualAlloc
FindClose
GetLocalTime
CloseHandle
lstrcpyW
IsProcessorFeaturePresent
SetStdHandle
CreateFileA
GetLocaleInfoW
InterlockedExchange
FreeLibrary
Sleep
FatalAppExitA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapDestroy
HeapCreate
GetCurrentThread
InterlockedDecrement
IsValidCodePage
SetLastError
InterlockedIncrement
TlsFree
FindFirstFileW
TlsGetValue
TlsAlloc
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
WriteFile
SetFilePointer
DeleteCriticalSection
SetHandleCount
RtlUnwind
InitializeCriticalSectionAndSpinCount
LoadLibraryW
SetConsoleCtrlHandler
GetLastError
GetModuleHandleW
GetProcAddress
LeaveCriticalSection
EnterCriticalSection
GetCurrentProcess
TerminateProcess
DecodePointer
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
HeapSetInformation
GetCommandLineA
GetModuleFileNameW
GetStdHandle
GetFileType
WriteConsoleW
HeapReAlloc
HeapSize
IsValidLocale
SetEndOfFile
LCMapStringW
GetStringTypeW
GetUserDefaultLCID
GetFileSize
GetDateFormatW
GetCommandLineW
ExitProcess
CreateHardLinkA
WriteProfileSectionW
SetConsoleMode
WritePrivateProfileSectionA
CreateDirectoryExW
GlobalMemoryStatus
SetCalendarInfoW
GetCPInfo
GetACP
TlsSetValue
GetOEMCP
GetLocaleInfoA
EnumSystemLocalesA
GetCurrentThreadId

mswsock

MigrateWinsockConfiguration
EnumProtocolsA
GetAddressByNameW
GetNameByTypeA
EnumProtocolsW

resutils

ResUtilGetEnvironmentWithNetName
ResUtilGetSzProperty
ResUtilGetDwordValue
ResUtilSetPrivatePropertyList
ResUtilEnumResources

loadperf

LoadPerfCounterTextStringsW
LoadPerfCounterTextStringsA
UnloadPerfCounterTextStringsW
UnloadPerfCounterTextStringsA

user32

CreateWindowExW
MessageBoxW
GetSystemMetrics
GetDlgItemTextW
SetDlgItemTextW
SendMessageW
UpdateWindow
SetWindowTextW
WinHelpW
ShowWindow
CheckMenuItem
MonitorFromRect
DispatchMessageW
GetWindowRect
SetMenuItemBitmaps
DefDlgProcA
GetMenu
TabbedTextOutW
SetLastErrorEx
GetDlgCtrlID
LoadStringW
GetMessageExtraInfo
EndDialog
GetDlgItem
GetWindowTextW
LoadIconW
RegisterClassExW
IsDialogMessageW
SetDlgItemInt
LoadAcceleratorsW
TranslateMessage
SetFocus
GetClientRect
LoadCursorW
GetParent
DialogBoxParamW
PostMessageW
LoadImageW
RegisterWindowMessageW
GetMessageW
SetActiveWindow
TranslateAcceleratorW
GetWindowTextLengthW
DestroyWindow
GetMonitorInfoW
GetDlgItemInt

gdi32

GetTextExtentPoint32W
GetTextMetricsW
StartPage
DeleteDC
CreateFontIndirectW
GetDeviceCaps
DeleteObject
SelectObject
SetMapMode
ExtTextOutW
GetTextExtentExPointW
StartDocW
EndDoc
EndPage

comdlg32

PrintDlgW
FindTextW
GetOpenFileNameW
GetSaveFileNameW
ChooseFontW
ReplaceTextW

advapi32

IsTextUnicode

shell32

ShellAboutW
DragAcceptFiles

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3ca6aee10ae08673a459e8a56b64f707

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

shlwapi

kernel32

mswsock

resutils

loadperf

user32

gdi32

comdlg32

advapi32

shell32

Sections

.text Size: 100KB - Virtual size: 99KB

.rdata Size: 16KB - Virtual size: 16KB

.data Size: 4KB - Virtual size: 16KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 100KB - Virtual size: 99KB

.rdata
Size: 16KB - Virtual size: 16KB

.data
Size: 4KB - Virtual size: 16KB

.reloc
Size: 5KB - Virtual size: 4KB