SecuriteInfo[.]com[.]Win32[.]Evo-gen[.]26751[.]28933 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.Evo-gen.26751.28933
Size

4KB
MD5

2b83cf264c82e40c02adebb5f93bf767
SHA1

c871a42ad155bea735a43709c255fa6edc48c1be
SHA256

aecb50ccad847175bc20bb89b888bc4518168249f3dabf9a57433f6a667477a4
SHA512

412c552abea01294fbd0dfd450b5112cf924794a5c7ae76479088b673c46266633eac6926d46fd8f55ba86a9c122a548f697078eca79f2f2551c5790d5cf5f65

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.Evo-gen.26751.28933

Files

SecuriteInfo.com.Win32.Evo-gen.26751.28933
.dll windows x86

703e2ec2ffc200713a423a3068187e63

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

ChrCmpIA
UrlCreateFromPathA
PathCombineA

kernel32

VirtualAlloc
EnumSystemCodePagesW
GetFileSize
CreateFileA
ReadFile
GetTempPathA

rtutils

TraceGetConsoleW
MprSetupProtocolEnum
LogErrorA
RouterLogEventA
RouterLogDeregisterW
TraceDumpExA

resutils

ResUtilVerifyService
ResUtilSetPropertyTable
ResUtilSetSzValue
ResUtilStopService
ResUtilFindSzProperty

gdi32

GetNearestPaletteIndex
GetCharABCWidthsI
AngleArc
GetCharWidthW
Ellipse
PolyPolygon

mapi32

ord14
ord159
ord199
ord22

Exports

Exports

JKbtgdfd

Sections

.text
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 27B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ