SecuriteInfo[.]com[.]Variant[.]Fragtor[.]246784[.]32291[.]18962[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Variant.Fragtor.246784.32291.18962.exe
Size

107KB
MD5

a101e76e11e09489a252d98d462f7107
SHA1

76b1edd340fc00daa1cc6a841b13259fbbf65db8
SHA256

7a1d341d6b0799a5d121cd7f241e3045dcf112dad8dd4f5e22e8399b7b7f6ed2
SHA512

3753d296adf309d95a997bef084d9f4aaee8c0e83a49ce8a84fdc5e1c5cde25499aa4618c6f36dc72141d2866bb27afb68e13186f69fe1f731f8b3c13c5f6c07
SSDEEP

3072:GUZEoi2ALwUycpPQ0mRYEo/DR53SU42e3KjAYgyPA/1NcsaCfj:GUHZRc1BdE04c1AGCfj

Score

1^/10

Malware Config

Signatures

Files

SecuriteInfo.com.Variant.Fragtor.246784.32291.18962.exe
.exe windows x86

619c89b124cdf4bef9f5d6383c3bda1f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
FileTimeToSystemTime
GetDateFormatW
MultiByteToWideChar
GetLocaleInfoW
DecodePointer
SetEndOfFile
GetConsoleCP
FlushFileBuffers
HeapSize
SetFilePointerEx
LCMapStringW
GetStringTypeW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapAlloc
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
VirtualAlloc
GetProcessHeap
HeapFree
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
ReadConsoleW
GetConsoleMode
ReadFile
GetFileType
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
WriteFile
GetStdHandle
RaiseException
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
WriteConsoleW
TlsAlloc
FormatMessageW
GetACP
SetLastError
GetLastError
CloseHandle
CreateFileW
HeapReAlloc
WideCharToMultiByte
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount

rpcrt4

NdrVaryingArrayUnmarshall
UuidCompare
RpcSsEnableAllocate
NdrCorrelationPass
NdrProxyGetBuffer
I_RpcSsDontSerializeContext

setupapi

SetupDiCreateDeviceInterfaceA
SetupAddToDiskSpaceListW
SetupDiDrawMiniIcon

rtm

RtmRegisterClient
RtmEnumerateGetNextRoute
RtmDeregisterClient
RtmLookupIPDestination

pdh

PdhGetCounterInfoA
PdhExpandCounterPathW
PdhGetCounterTimeBase
PdhAddCounterW
PdhFormatFromRawValue
PdhRemoveCounter
PdhConnectMachineA

comdlg32

PrintDlgExA
PrintDlgA
CommDlgExtendedError

wsnmp32

ord903
ord204
ord320
ord101
ord302

user32

LoadStringW

Sections

.text
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

619c89b124cdf4bef9f5d6383c3bda1f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

rpcrt4

setupapi

rtm

pdh

comdlg32

wsnmp32

user32

Sections

.text Size: 70KB - Virtual size: 70KB

.rdata Size: 28KB - Virtual size: 27KB

.data Size: 3KB - Virtual size: 5KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 70KB - Virtual size: 70KB

.rdata
Size: 28KB - Virtual size: 27KB

.data
Size: 3KB - Virtual size: 5KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 4KB - Virtual size: 3KB