SecuriteInfo[.]com[.]Variant[.]Zusy[.]448594[.]18566[.]12190[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Variant.Zusy.448594.18566.12190.exe
Size 179KB
Sample230224-pxb5qabc27
SHA256 7d16edee6fbccf5bcb73691b8f69113f3e80c804d66b49e71be48ef21eea30b5
MD5 cee44021a4841cf66516938c3b09cd3a
SHA1 0e2d3a5f496f87ea41b0fe273332dee4b0988d9f
SHA512 43e3a990b9a19f6890c1a86ddf41a59d2f42c3dd902dcd73ece9f6fcf4ffb9347b785a10ab0a7a9e0fc8c72ad14d31e2a90593dd585d3a1aee71b72208b5c4cb
SSDEEP 3072:bwevYpKTDMDU3fuuE46lC4PQyfHU6Ig4cjnjFRpbll/XbqefxlS3ETgmBN8vqI5L:sevY8m+u3wB4HzlrzPOefxoEBK7
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

SecuriteInfo.com.Variant.Zusy.448594.18566.12190.exe

.exe 179KB

SecuriteInfo.com.Variant.Zusy.448594.18566.12190.exe

IMPHASH f214c5f744673db93dec4b219265fbc2
SHA256 7d16edee6fbccf5bcb73691b8f69113f3e80c804d66b49e71be48ef21eea30b5
MD5 cee44021a4841cf66516938c3b09cd3a
SHA1 0e2d3a5f496f87ea41b0fe273332dee4b0988d9f
SHA512 43e3a990b9a19f6890c1a86ddf41a59d2f42c3dd902dcd73ece9f6fcf4ffb9347b785a10ab0a7a9e0fc8c72ad14d31e2a90593dd585d3a1aee71b72208b5c4cb
SSDEEP 3072:bwevYpKTDMDU3fuuE46lC4PQyfHU6Ig4cjnjFRpbll/XbqefxlS3ETgmBN8vqI5L:sevY8m+u3wB4HzlrzPOefxoEBK7
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20807

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLastError CloseHandle IsBadStringPtrA IsBadCodePtr GetModuleHandleA GetQueuedCompletionStatus FlushFileBuffers HeapSize WriteConsoleW SetStdHandle RtlUnwind IsBadReadPtr VirtualQuery GetSystemInfo CreateIoCompletionPort HeapDestroy GetProcessHeap HeapCreate ExitProcess GetTickCount lstrlenA HeapReAlloc HeapFree HeapAlloc InterlockedIncrement LoadLibraryW OutputDebugStringW LoadLibraryExW LCMapStringEx GetStringTypeW GetCommandLineA IsDebuggerPresent EncodePointer DecodePointer IsProcessorFeaturePresent SetLastError InterlockedDecrement GetCurrentThreadId IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar GetModuleHandleExW GetProcAddress GetStdHandle WriteFile GetModuleFileNameW GetFileType InitializeCriticalSectionAndSpinCount DeleteCriticalSection InitOnceExecuteOnce GetStartupInfoW GetModuleFileNameA QueryPerformanceCounter GetSystemTimeAsFileTime GetTickCount64 GetEnvironmentStringsW FreeEnvironmentStringsW WideCharToMultiByte UnhandledExceptionFilter SetUnhandledExceptionFilter FlsAlloc FlsGetValue FlsSetValue FlsFree GetCurrentProcess TerminateProcess GetModuleHandleW EnterCriticalSection LeaveCriticalSection GetConsoleCP GetConsoleMode SetFilePointerEx Sleep CreateFileW

user32

DrawTextW TranslateMessage GetMessageW DispatchMessageW

gdi32

CreateCompatibleDC SelectPalette CreatePen DeleteObject SetROP2 BitBlt CreateRectRgn PathToRegion CreateCompatibleBitmap CreateBitmap DeleteDC

advapi32

GetUserNameW IsTextUnicode

shell32

CommandLineToArgvW SHGetFolderPathW SHGetSpecialFolderPathW

ole32

CoUninitialize CoInitialize CoTaskMemFree CoCreateInstance

shlwapi

PathCompactPathExW PathMakeSystemFolderW

winmm

PlaySoundW waveOutGetNumDevs