Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.PWSX-gen.18948.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.PWSX-gen.18948.exe
Resource
win10v2004-20230220-en
General
-
Target
SecuriteInfo.com.Win32.PWSX-gen.18948.882
-
Size
329KB
-
MD5
243ce012c474184106b10cb8ce062b44
-
SHA1
a72aff80173dbafe14b280bd1e9fcf408e303ca0
-
SHA256
8ec93464053f270b08641a08c9dc7ae9ed7dc54493c7fab9064dcc6e3b634579
-
SHA512
71f61532c29f9d68ed3d08e06829b7f1f94928a480f76741d5cfe7ecc7111a5bfb98fae96c7199f52d7a86fe487a7fa54e85988faa1be17976eb2e6bf0ec5f8d
-
SSDEEP
6144:Q83jVT9qupGMNWRC8wjNLflrqpxjYwI69BfVWR0GqkuxuiZD:13jV7WgxjNrApxjYwBHkuxu
Malware Config
Signatures
Files
-
SecuriteInfo.com.Win32.PWSX-gen.18948.882.exe windows x86
2f23714c1183591e050c421614e72e71
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_Destroy
ImageList_Create
ImageList_SetBkColor
ImageList_AddMasked
PropertySheetW
imm32
ImmGetCandidateListCountA
ImmSetCompositionStringA
ImmGetConversionStatus
ImmSetCompositionFontA
ImmGetRegisterWordStyleA
ImmRegisterWordA
ImmGetImeMenuItemsA
ImmSetCandidateWindow
ImmGetGuideLineA
shlwapi
PathSearchAndQualifyW
PathIsUNCServerW
PathBuildRootW
SHEnumValueA
IntlStrEqWorkerW
kernel32
MapViewOfFile
UnmapViewOfFile
DisableThreadLibraryCalls
FreeLibrary
LoadLibraryW
LocalFree
MulDiv
FormatMessageW
lstrcmpW
lstrcpynW
lstrcpyW
lstrcatW
lstrlenW
CreateFileMappingA
FileTimeToSystemTime
GetDateFormatW
MultiByteToWideChar
GetLocaleInfoW
GetConsoleOutputCP
FlushFileBuffers
HeapSize
SetConsoleCtrlHandler
LCMapStringW
CompareStringW
GetTimeFormatW
GetTempPathW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetFileType
SetStdHandle
SetEnvironmentVariableW
WriteConsoleW
GetEnvironmentStringsW
WideCharToMultiByte
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
VirtualAlloc
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
OutputDebugStringW
GetCurrentThread
GetStringTypeW
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
GetStdHandle
RaiseException
EncodePointer
LoadLibraryExW
GetProcAddress
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
RtlUnwind
InterlockedFlushSList
InterlockedPushEntrySList
TerminateProcess
GetCurrentProcess
DecodePointer
GetModuleHandleW
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
GetProcessHeap
HeapFree
HeapReAlloc
HeapAlloc
SetLastError
GetLastError
CloseHandle
WriteFile
CreateFileW
CreateFileA
CompareFileTime
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
ReadFile
GetACP
ReadConsoleW
FreeEnvironmentStringsW
msi
ord133
ord103
ord50
ord70
ord66
ord65
ord130
ord147
ord91
loadperf
LoadPerfCounterTextStringsW
LoadPerfCounterTextStringsA
UnloadPerfCounterTextStringsW
winspool.drv
EnumJobsA
ConfigurePortW
PrinterProperties
ord210
ord100
DeletePrinterDataA
AddMonitorA
AddFormA
GetPrintProcessorDirectoryA
ord215
wininet
InternetConfirmZoneCrossing
FindNextUrlCacheContainerW
GopherGetLocatorTypeA
FtpRemoveDirectoryW
CreateUrlCacheContainerW
setupapi
SetupDiOpenDeviceInterfaceW
SetupCreateDiskSpaceListA
SetupDiRegisterDeviceInfo
SetupDiGetActualSectionToInstallW
SetupDiDestroyDeviceInfoList
SetupQueueCopySectionA
user32
GetDC
SetFocus
IsDlgButtonChecked
GetDlgItem
ReleaseDC
DialogBoxParamW
SetWindowPos
ShowWindow
PostMessageW
SendMessageW
SendMessageA
LoadStringW
ShowScrollBar
GetWindowRect
MessageBoxW
MapWindowPoints
GetWindowLongW
SetWindowLongW
GetParent
EnumChildWindows
LoadBitmapW
LoadImageW
EndDialog
EnableWindow
gdi32
GetDeviceCaps
DeleteObject
CreateFontW
comdlg32
GetSaveFileNameW
GetOpenFileNameW
advapi32
CryptSetProvParam
CryptGetUserKey
RegCloseKey
RegCreateKeyExW
RegDeleteValueA
CryptGetKeyParam
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextW
RegSetValueExA
RegQueryValueExA
ole32
CreateBindCtx
Sections
.text Size: 283KB - Virtual size: 282KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ