SecuriteInfo[.]com[.]Variant[.]Jaik[.]147829[.]15394[.]21464[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Variant.Jaik.147829.15394.21464.dll
Size

5KB
MD5

e9bae2d218f4aedba5c594ef7d4d315e
SHA1

f3836094e91e83872152dd3cf17d54202d1f9462
SHA256

2aa5401f465ce356bdc30a46b0e94c69d3c66e12b9a801d589b6834de80733ee
SHA512

819a4f4309dbda47e44e81a0ea49f3fc6966f2ae86e641c459500132bd23af927103c83cc3269036ef6d6720f1ccf07c21c1a2ce04cca4b8dcf0e45f3707853b
SSDEEP

48:SPQrr2JIr6tMTqUDnsJ+DhNUMEcgKCk52Ew0BprPBKciSNMfwCjCAX7IhxS5y:9rhT9sHUCq270To1VfwCjd7IhxS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Variant.Jaik.147829.15394.21464.dll

Files

SecuriteInfo.com.Variant.Jaik.147829.15394.21464.dll
.dll windows x86

b41dc75efc329e0801cfd3267cab4c55

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
EnumResourceTypesA
GetProcAddress
VirtualAlloc

mapi32

ord203
ord141
ord159
ord133
ord75
ord78
ord15
ord152

ws2_32

connect
accept
ntohl
WSARecvDisconnect
WSCEnumProtocols
WSAGetQOSByName

pdh

PdhGetFormattedCounterArrayW
PdhGetRawCounterArrayA
PdhCollectQueryData
PdhGetDefaultPerfCounterW
PdhVbIsGoodStatus
PdhLookupPerfIndexByNameW
PdhUpdateLogW

rtutils

MprSetupProtocolEnum
RouterLogEventDataW
TracePutsExA
TraceRegisterExW
TraceRegisterExA
TraceDumpExW

mpr

WNetEnumResourceW
WNetConnectionDialog

ole32

HMETAFILEPICT_UserUnmarshal
CreateDataCache
CLIPFORMAT_UserMarshal
HENHMETAFILE_UserSize
MkParseDisplayName
ReadClassStm
OleIsCurrentClipboard
HMETAFILEPICT_UserSize
HACCEL_UserUnmarshal

comdlg32

PrintDlgExW
PrintDlgExA
ChooseFontW
ChooseColorA
ReplaceTextW
FindTextA

rtm

RtmGetFirstRoute
RtmCloseEnumerationHandle
RtmDeregisterClient
RtmDeleteRoute
RtmGetNetworkCount
MgmInitialize

rpcrt4

I_RpcTransServerNewConnection
RpcMgmtEpEltInqDone
RpcMgmtEnableIdleCleanup
NdrComplexStructFree

Exports

Exports

eIxo

Sections

.text
Size: 1024B - Virtual size: 670B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 130B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b41dc75efc329e0801cfd3267cab4c55

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

mapi32

ws2_32

pdh

rtutils

mpr

ole32

comdlg32

rtm

rpcrt4

Exports

Exports

Sections

.text Size: 1024B - Virtual size: 670B

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 130B

.reloc Size: 512B - Virtual size: 148B

.text
Size: 1024B - Virtual size: 670B

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 130B

.reloc
Size: 512B - Virtual size: 148B