Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.PWSX-gen.17761.12739.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.PWSX-gen.17761.12739.exe
Resource
win10v2004-20230220-en
General
-
Target
SecuriteInfo.com.PWSX-gen.17761.12739.exe
-
Size
329KB
-
MD5
d1b325b2364cc6fcf91f71d4cd5c54dd
-
SHA1
f8d0dc78d4a24d2557adcbeb4289cb4153c6dfdf
-
SHA256
d758fc249b938b330cd4f3857577005f849f1810a34f0800706dbbceaec417fe
-
SHA512
0a98fe905e2e7f34586966169ae0b60c80c1ef14fa17d5afa98a933cad25211562bc88807561156fee15ac75dcb148758aded8da2a7b17eb85fde06020739e5e
-
SSDEEP
6144:y83jVT9qupGMNWRC8wjNLflrqpxjYwI69BfVWR0GqkuxuiCD:f3jV7WgxjNrApxjYwBHkuxu
Malware Config
Signatures
Files
-
SecuriteInfo.com.PWSX-gen.17761.12739.exe.exe windows x86
2f23714c1183591e050c421614e72e71
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_Destroy
ImageList_Create
ImageList_SetBkColor
ImageList_AddMasked
PropertySheetW
imm32
ImmGetCandidateListCountA
ImmSetCompositionStringA
ImmGetConversionStatus
ImmSetCompositionFontA
ImmGetRegisterWordStyleA
ImmRegisterWordA
ImmGetImeMenuItemsA
ImmSetCandidateWindow
ImmGetGuideLineA
shlwapi
PathSearchAndQualifyW
PathIsUNCServerW
PathBuildRootW
SHEnumValueA
IntlStrEqWorkerW
kernel32
MapViewOfFile
UnmapViewOfFile
DisableThreadLibraryCalls
FreeLibrary
LoadLibraryW
LocalFree
MulDiv
FormatMessageW
lstrcmpW
lstrcpynW
lstrcpyW
lstrcatW
lstrlenW
CreateFileMappingA
FileTimeToSystemTime
GetDateFormatW
MultiByteToWideChar
GetLocaleInfoW
GetConsoleOutputCP
FlushFileBuffers
HeapSize
SetConsoleCtrlHandler
LCMapStringW
CompareStringW
GetTimeFormatW
GetTempPathW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetFileType
SetStdHandle
SetEnvironmentVariableW
WriteConsoleW
GetEnvironmentStringsW
WideCharToMultiByte
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
VirtualAlloc
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
OutputDebugStringW
GetCurrentThread
GetStringTypeW
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
GetStdHandle
RaiseException
EncodePointer
LoadLibraryExW
GetProcAddress
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
RtlUnwind
InterlockedFlushSList
InterlockedPushEntrySList
TerminateProcess
GetCurrentProcess
DecodePointer
GetModuleHandleW
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
GetProcessHeap
HeapFree
HeapReAlloc
HeapAlloc
SetLastError
GetLastError
CloseHandle
WriteFile
CreateFileW
CreateFileA
CompareFileTime
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
ReadFile
GetACP
ReadConsoleW
FreeEnvironmentStringsW
msi
ord133
ord103
ord50
ord70
ord66
ord65
ord130
ord147
ord91
loadperf
LoadPerfCounterTextStringsW
LoadPerfCounterTextStringsA
UnloadPerfCounterTextStringsW
winspool.drv
EnumJobsA
ConfigurePortW
PrinterProperties
ord210
ord100
DeletePrinterDataA
AddMonitorA
AddFormA
GetPrintProcessorDirectoryA
ord215
wininet
InternetConfirmZoneCrossing
FindNextUrlCacheContainerW
GopherGetLocatorTypeA
FtpRemoveDirectoryW
CreateUrlCacheContainerW
setupapi
SetupDiOpenDeviceInterfaceW
SetupCreateDiskSpaceListA
SetupDiRegisterDeviceInfo
SetupDiGetActualSectionToInstallW
SetupDiDestroyDeviceInfoList
SetupQueueCopySectionA
user32
GetDC
SetFocus
IsDlgButtonChecked
GetDlgItem
ReleaseDC
DialogBoxParamW
SetWindowPos
ShowWindow
PostMessageW
SendMessageW
SendMessageA
LoadStringW
ShowScrollBar
GetWindowRect
MessageBoxW
MapWindowPoints
GetWindowLongW
SetWindowLongW
GetParent
EnumChildWindows
LoadBitmapW
LoadImageW
EndDialog
EnableWindow
gdi32
GetDeviceCaps
DeleteObject
CreateFontW
comdlg32
GetSaveFileNameW
GetOpenFileNameW
advapi32
CryptSetProvParam
CryptGetUserKey
RegCloseKey
RegCreateKeyExW
RegDeleteValueA
CryptGetKeyParam
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextW
RegSetValueExA
RegQueryValueExA
ole32
CreateBindCtx
Sections
.text Size: 283KB - Virtual size: 282KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ