SecuriteInfo[.]com[.]Variant[.]Zusy[.]452601[.]355[.]26309

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Variant.Zusy.452601.355.26309
Size

60KB
MD5

70fad5b7a6db44f7bce9f04893deb50b
SHA1

cc4acb2b13445029f2f75e579a709b0f6010e3ed
SHA256

7d12cfe37221a6976e23409ea05821ac28e04175ae8fe8d0732766070d53b43f
SHA512

a509924c4251bfc6359297b88363013b9a095d0d015bbd1c7fd14b4edbab506584b3119905ef172b3234f63d96ffbc896312cf958e8c45ba7502ccf363b52cdb
SSDEEP

768:19Hdb1fz0jzlhEBIJdQAQ1pIPrfPJXdEYw0uzMTPkmARSdiY2APbhG57RY:19Hb8hHJmHIPrfBGcPi25Ps5

Score

1^/10

Malware Config

Signatures

Files

SecuriteInfo.com.Variant.Zusy.452601.355.26309
.exe windows x86

4ceb1298ca5ff9fb7d4f66c2c4a83b34

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

SHGetValueA
StrPBrkA
PathAddExtensionA
StrNCatA
PathCanonicalizeA
StrToIntExA

kernel32

WriteProcessMemory
RequestWakeupLatency
VirtualLock
SetConsoleOutputCP
lstrlenW
VirtualProtect
DeleteCriticalSection
lstrcpyW
LocalUnlock
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetProcessHeap
SetEndOfFile
GetLocaleInfoA
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetStdHandle
CreateFileA
CloseHandle
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapAlloc
GetCommandLineA
GetStartupInfoA
LeaveCriticalSection
EnterCriticalSection
HeapFree
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
MultiByteToWideChar
GetLastError
ReadFile
SetHandleCount
GetFileType
SetFilePointer
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement

comdlg32

PrintDlgA
PrintDlgExW
ChooseColorW
CommDlgExtendedError
GetFileTitleA
GetSaveFileNameA

mscms

AssociateColorProfileWithDeviceA
SetStandardColorSpaceProfileW
SelectCMM
GetColorProfileHeader

mswsock

GetServiceW
MigrateWinsockConfiguration
GetAcceptExSockaddrs
GetAddressByNameA
GetNameByTypeW
EnumProtocolsW
NPLoadNameSpaces
dn_expand

ws2_32

WSAJoinLeaf
htonl
WSAAddressToStringA
WSCUnInstallNameSpace
WSAGetServiceClassInfoW
shutdown
WSCInstallNameSpace
WSAProviderConfigChange

urlmon

IsAsyncMoniker
SetSoftwareUpdateAdvertisementState
CoInternetCompareUrl
GetClassURL
ReleaseBindInfo
ObtainUserAgentString
GetClassFileOrMime

ole32

CoInstall

Exports

Exports

_CredPackAuthenticationBufferW@20
_CredUIParseUserNameW@20
_CredUIPromptForWindowsCredentialsW@36
_CredUIReadSSOCredW@8
_CredUIStoreSSOCredW@16
_CredUnPackAuthenticationBufferW@36

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4ceb1298ca5ff9fb7d4f66c2c4a83b34

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

kernel32

comdlg32

mscms

mswsock

ws2_32

urlmon

ole32

Exports

Exports

Sections

.text Size: 41KB - Virtual size: 40KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 11KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 41KB - Virtual size: 40KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 11KB

.reloc
Size: 4KB - Virtual size: 3KB