SecuriteInfo[.]com[.]Variant[.]Fragtor[.]273750[.]29364[.]6434[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Variant.Fragtor.273750.29364.6434.exe
Size

44KB
MD5

5e774eef4e31094fb348e5e9a1f2d65e
SHA1

3616a3ac9992b50224d356c99e3516695f630445
SHA256

9d2bb6c6f36d4e4c4f11a69eb1d7fb2ac328e603bfe82b8dea36e384eec439b8
SHA512

54a78d013969a1f079a5e6bd863581c050e5ce09e749805bc7c3f8830a76524e2e8c43641a07ffd13bca90187069508b407a6238ac3a41a59f8ae91a1be641b8
SSDEEP

768:56nhkHDSYGd1jwqrcTybYGfEM/tPNK9W04xxmVs//:56hQ+veqrcSV+4+y/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Variant.Fragtor.273750.29364.6434.exe

Files

SecuriteInfo.com.Variant.Fragtor.273750.29364.6434.exe
.exe windows x86

b79142f1df6c12c1bc1cb268b4f995de

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringEx
HeapSize
GetStringTypeW
WideCharToMultiByte
HeapReAlloc
HeapAlloc
RtlUnwind
LoadLibraryW
OutputDebugStringW
IsDebuggerPresent
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
Sleep
HeapFree
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleW
TerminateProcess
GetCurrentProcess
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount64
EnumResourceTypesW
lstrlenW
VirtualAlloc
ExitProcess
ReadFile
LoadLibraryExW
CreateFileW
GetSystemTimeAsFileTime
GetCommandLineW
GetLastError
SetLastError
InterlockedIncrement
InterlockedDecrement
GetCurrentThreadId
IsProcessorFeaturePresent
EncodePointer
DecodePointer
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
GetStdHandle
WriteFile
GetModuleFileNameW
GetProcessHeap
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InitOnceExecuteOnce
GetStartupInfoW
QueryPerformanceCounter
CloseHandle

rtm

RtmGetRouteAge
RtmDeregisterClient
MgmGetNextMfe

loadperf

LoadPerfCounterTextStringsA
UnloadPerfCounterTextStringsA

rtutils

TracePrintfA
TraceVprintfExW
TracePrintfW
RouterLogRegisterW
RouterLogEventStringW
TraceDumpExW

odbc32

ord11
ord262
ord107
ord41

mapi32

ord160
ord193
ord126
ord121
ord156
ord192
ord52

setupapi

SetupDiClassGuidsFromNameA
SetupDecompressOrCopyFileA
SetupFindFirstLineA
SetupDiGetClassDevsW

user32

GetMessageW
TranslateMessage
DispatchMessageW
SetWindowPos
UpdateWindow
BeginPaint
EndPaint
GetClientRect
MessageBoxW
LoadCursorW
CreateWindowExW
DefWindowProcW
PostQuitMessage
RegisterClassExW
ShowWindow

gdi32

SetTextColor
SelectObject
GetTextExtentPoint32W
DeleteObject
CreateFontW
TextOutW

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b79142f1df6c12c1bc1cb268b4f995de

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

rtm

loadperf

rtutils

odbc32

mapi32

setupapi

user32

gdi32

Sections

.text Size: 25KB - Virtual size: 25KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 25KB - Virtual size: 25KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 3KB - Virtual size: 3KB