SecuriteInfo[.]com[.]Variant[.]Lazy[.]346242[.]9201[.]25057[.]exe

General

Target
SecuriteInfo.com.Variant.Lazy.346242.9201.25057.exe
Size 1.9MB
Sample230525-v249ysbe37
SHA256 e85f312207a23df0738e05ddd8fb2b46f5c5d4d3fd98979aab086077f5b96be7
MD5 a23fdb5f7f0ec141bc19a1e3005951b1
SHA1 e1db560a7c769426a1c756c519ab2a008f24eb0c
SHA512 726fb33dbc07727ee2e0d66f0f813b5bfaeebe9bbd48287aa394061be893573520b74e9357f3efcf8a9b9086aece0635d4788ca0e0c439aa954ad6299efd6eec
SSDEEP 12288:E9t1l5SWp2uctySdelGR1d9UvxalYCc/fGvXhzO:0tLdUxQlGR1jUvxalhc/fGvXhi
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Variant.Lazy.346242.9201.25057.exe

File Explorer

SecuriteInfo.com.Variant.Lazy.346242.9201.25057.exe

.exe 1.9MB

SecuriteInfo.com.Variant.Lazy.346242.9201.25057.exe

IMPHASH ac4e45ef98fe94fd272b083fed3c156d
SHA256 e85f312207a23df0738e05ddd8fb2b46f5c5d4d3fd98979aab086077f5b96be7
MD5 a23fdb5f7f0ec141bc19a1e3005951b1
SHA1 e1db560a7c769426a1c756c519ab2a008f24eb0c
SHA512 726fb33dbc07727ee2e0d66f0f813b5bfaeebe9bbd48287aa394061be893573520b74e9357f3efcf8a9b9086aece0635d4788ca0e0c439aa954ad6299efd6eec
SSDEEP 12288:E9t1l5SWp2uctySdelGR1d9UvxalYCc/fGvXhzO:0tLdUxQlGR1jUvxalhc/fGvXhi
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

28137

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shell32

ord716 ord168

user32

DdeQueryNextServer

kernel32

FreeLibrary CreateFileW HeapSize ReadConsoleW GetProcessHeap GetDateFormatEx GetModuleHandleA FreeConsole MultiByteToWideChar GetStringTypeW WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW SetStdHandle RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree WriteConsoleW GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapAlloc GetFileType GetFileSizeEx SetFilePointerEx CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW

Name

.text

Size

117KB

Virtual Size

117KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

51KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

174KB

Virtual Size

177KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.oldZ1

Size

782KB

Virtual Size

782KB

Characteristics

IMAGE_SCN_CNT_CODE

Name

.oldZ1

Size

782KB

Virtual Size

782KB

Characteristics

IMAGE_SCN_CNT_CODE

Sharing

General

Malware Config

Signatures

File Explorer

SecuriteInfo.com.Variant.Lazy.346242.9201.25057.exe

shell32

user32

kernel32