SecuriteInfo[.]com[.]Win32[.]Malware-gen[.]16115[.]9207

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.Malware-gen.16115.9207
Size

52KB
MD5

fb172c3dcbb6b4359ca2696198fc577c
SHA1

5a1f34b93b18fc6ef5415cef4dd3d2502f6c55b5
SHA256

b300d645057523d12699bfcbdb2f455c7901e9bdb5e10d44ac8f6491a6919e38
SHA512

33d0d3d8870b912147a75d2aa9d655eac8b0889baa7f276d7e1780909c57049dc97d9fb90b213f4a85e92d59c8fd17fcb9e6cfae4d6611bb903e13ed0a15f952
SSDEEP

768:pInbnZTRSqFeviCOBQiNhhGtVd/1fVy3ReMyPNfmRQPBwEDbAntRZ/6qpB:p+ZlkviCOBDzotVd/oURdRPBStR9

Score

1^/10

Malware Config

Signatures

Files

SecuriteInfo.com.Win32.Malware-gen.16115.9207
.exe windows x86

40db67fca56a55837ab5f42f312c0a5b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrCmpNIA

kernel32

GetBinaryTypeW
BackupSeek
LocalUnlock
BuildCommDCBW
Module32Next
WaitForSingleObject
AreFileApisANSI
GetDiskFreeSpaceW
lstrcpyn
lstrlenW
VirtualProtect
DeleteCriticalSection
lstrcpyW
CreateFileW
GetStringTypeW
LCMapStringW
WriteConsoleW
GetProcessHeap
SetEndOfFile
HeapReAlloc
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
GetConsoleMode
GetConsoleCP
IsProcessorFeaturePresent
SetStdHandle
CreateFileA
CloseHandle
HeapFree
Sleep
LoadLibraryW
HeapAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
EncodePointer
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
RtlUnwind
MultiByteToWideChar
GetLastError
ReadFile
SetHandleCount
GetFileType
SetFilePointer
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime

wsnmp32

ord102
ord402
ord606
ord604
ord301

shell32

DragQueryFileAorW

pdh

PdhGetCounterInfoA
PdhLookupPerfNameByIndexW
PdhEnumObjectsW
PdhValidatePathA
PdhVbGetCounterPathElements
PdhSelectDataSourceA

ole32

EnableHookObject
DllGetClassObjectWOW
StgCreateStorageEx

oleaut32

VarBstrCat
VarR8Pow
SafeArrayGetRecordInfo
VarI4FromBool
VarUI1FromUI4
VarI2FromR4
SafeArrayCreateVectorEx

Exports

Exports

_CredPackAuthenticationBufferW@20
_CredUIParseUserNameW@20
_CredUIPromptForWindowsCredentialsW@36
_CredUIReadSSOCredW@8
_CredUIStoreSSOCredW@16
_CredUnPackAuthenticationBufferW@36

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

40db67fca56a55837ab5f42f312c0a5b

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

kernel32

wsnmp32

shell32

pdh

ole32

oleaut32

Exports

Exports

Sections

.text Size: 34KB - Virtual size: 33KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 11KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 34KB - Virtual size: 33KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 11KB

.reloc
Size: 3KB - Virtual size: 3KB