SecuriteInfo[.]com[.]Variant[.]Zusy[.]452601[.]7557[.]17031

Sharing

Copy URL

Twitter E-mail

General

Target

SecuriteInfo.com.Variant.Zusy.452601.7557.17031
Size

60KB
MD5

b43f5aa7e768abb0f4ed72288c5b76b3
SHA1

92b6620384eb0c218ff16bf9adff940928734809
SHA256

3bf3ed6a245662efc963da4b085f256f10d18f0215187e535e376d749c04e05a
SHA512

8a6e5c7367e5899c68c58c2594f7307ff80284332a3f0cf69fcab24bc4da236cd45751eb172d725b7b21d197d20146dc78acad23aaa0ce96f9a2dffb3c90834e
SSDEEP

768:p9Hdb1fz0jzlhEBIJdQAQ1pIPrfPJXdEYw0uzMTPkmARSdiY2APbhG5XRY:p9Hb8hHJmHIPrfBGcPi25Ps5

Score

1^/10

Malware Config

Signatures

Files

SecuriteInfo.com.Variant.Zusy.452601.7557.17031
.exe windows x86

4ceb1298ca5ff9fb7d4f66c2c4a83b34

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

SHGetValueA
StrPBrkA
PathAddExtensionA
StrNCatA
PathCanonicalizeA
StrToIntExA

kernel32

WriteProcessMemory
RequestWakeupLatency
VirtualLock
SetConsoleOutputCP
lstrlenW
VirtualProtect
DeleteCriticalSection
lstrcpyW
LocalUnlock
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetProcessHeap
SetEndOfFile
GetLocaleInfoA
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetStdHandle
CreateFileA
CloseHandle
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapAlloc
GetCommandLineA
GetStartupInfoA
LeaveCriticalSection
EnterCriticalSection
HeapFree
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
MultiByteToWideChar
GetLastError
ReadFile
SetHandleCount
GetFileType
SetFilePointer
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement

comdlg32

PrintDlgA
PrintDlgExW
ChooseColorW
CommDlgExtendedError
GetFileTitleA
GetSaveFileNameA

mscms

AssociateColorProfileWithDeviceA
SetStandardColorSpaceProfileW
SelectCMM
GetColorProfileHeader

mswsock

GetServiceW
MigrateWinsockConfiguration
GetAcceptExSockaddrs
GetAddressByNameA
GetNameByTypeW
EnumProtocolsW
NPLoadNameSpaces
dn_expand

ws2_32

WSAJoinLeaf
htonl
WSAAddressToStringA
WSCUnInstallNameSpace
WSAGetServiceClassInfoW
shutdown
WSCInstallNameSpace
WSAProviderConfigChange

urlmon

IsAsyncMoniker
SetSoftwareUpdateAdvertisementState
CoInternetCompareUrl
GetClassURL
ReleaseBindInfo
ObtainUserAgentString
GetClassFileOrMime

ole32

CoInstall

Exports

Exports

_CredPackAuthenticationBufferW@20
_CredUIParseUserNameW@20
_CredUIPromptForWindowsCredentialsW@36
_CredUIReadSSOCredW@8
_CredUIStoreSSOCredW@16
_CredUnPackAuthenticationBufferW@36

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4ceb1298ca5ff9fb7d4f66c2c4a83b34

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

kernel32

comdlg32

mscms

mswsock

ws2_32

urlmon

ole32

Exports

Exports

Sections

.text Size: 41KB - Virtual size: 40KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 11KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 41KB - Virtual size: 40KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 11KB

.reloc
Size: 4KB - Virtual size: 3KB