SecuriteInfo[.]com[.]Win32[.]PWSX-gen[.]30804[.]10971[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

SecuriteInfo.com.Win32.PWSX-gen.30804.10971.exe
Size

8KB
MD5

7044c33949878feee054c7ce1064d52c
SHA1

9c116f6d80c8b45608e229bc9bfba04c6c4b0a7a
SHA256

ec40b6c905fbc80278747512e722d0d85a094bbb27abe06dee26bfa1b272807d
SHA512

242f1b5b33354113d563bf15024ea748c4c67f96cc56d51b65eda02c7b3025f66082da4a07de35bada425edb3c9f87021097611efb8fb21a5a667bb951580309
SSDEEP

96:BWHncXFci21eyZxrOflYfGKWAuLTaFmfKALuewj/xRrTiH9:4HVjrk7AuL+FwKAAj/XvC9

Score

1^/10

Malware Config

Signatures

Files

SecuriteInfo.com.Win32.PWSX-gen.30804.10971.exe
.exe windows x86

4a650766a72f332cc6ab5c9a180866a1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmGetDescriptionW
ImmGetImeMenuItemsA
ImmGetImeMenuItemsW
ImmIsIME
ImmNotifyIME

resutils

ClusWorkerCheckTerminate
ResUtilGetDwordProperty
ResUtilGetEnvironmentWithNetName
ResUtilGetProperties
ResUtilIsPathValid
ResUtilSetMultiSzValue
ResUtilSetPrivatePropertyList

rpcrt4

I_RpcTransConnectionReallocPacket
NdrByteCountPointerBufferSize
NdrStubCall2
RpcServerUseProtseqEpW

oleaut32

LPSAFEARRAY_Marshal
VarBoolFromUI4
VarCyFromDec
VarDateFromDisp
VarDecFromDate
VarR4FromUI2
VarR8FromI1
VarUI1FromUI4
VarUI4FromDisp
VarUI4FromI1

mswsock

GetNameByTypeA
GetServiceW
GetTypeByNameA
NPLoadNameSpaces
SetServiceA
rresvport

msacm32

acmDriverOpen
acmFormatChooseW
acmFormatTagDetailsA
acmStreamClose
acmStreamPrepareHeader

wsnmp32

ord201
ord901
ord205
ord206
ord204

msvcrt

_XcptFilter
__getmainargs
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_acmdln
_adjust_fdiv
_controlfp
_except_handler3
_exit
_initterm
exit
fopen
fread
fseek
ftell
malloc
memcpy
wcschr
wcsrchr

kernel32

GetModuleHandleA
GetStartupInfoA
VirtualProtect
lstrcpyW
lstrlenW

Exports

Exports

_CredPackAuthenticationBufferW@20
_CredUIParseUserNameW@20
_CredUIPromptForWindowsCredentialsW@36
_CredUIReadSSOCredW@8
_CredUIStoreSSOCredW@16
_CredUnPackAuthenticationBufferW@36

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4a650766a72f332cc6ab5c9a180866a1

Headers

DLL Characteristics

File Characteristics

Imports

imm32

resutils

rpcrt4

oleaut32

mswsock

msacm32

wsnmp32

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 136B

.00cfg Size: 512B - Virtual size: 8B

.reloc Size: 512B - Virtual size: 252B

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 136B

.00cfg
Size: 512B - Virtual size: 8B

.reloc
Size: 512B - Virtual size: 252B