SecuriteInfo[.]com[.]Variant[.]Mikey[.]130986[.]16854[.]20013

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Variant.Mikey.130986.16854.20013
Size

47KB
MD5

ea41f063d08a24c992a9db51ebd1fd7f
SHA1

f28dda174cb32acfdc47cae0a101de53ab78d3a4
SHA256

9b51a7156f242aaafb43c7ca8b5ff9547643a747e4a672d06669aec9a29b28ee
SHA512

ca7875967878aae950a48b1e149154d6181813717317cb3cb2ab95bff729e115d88b838912021c73f67cdf09fa30aa6a469b153a43e63f348613eb341d8bab58
SSDEEP

768:qiX/pJiW4DhHr1fXgLAn1F4vXGmUEKRnJyQud4W7BGONDRitWTWN5hOj2jIRo1ie:3pJiW43gCSiNWTWN5hzZHVuIXxXFyqdR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Variant.Mikey.130986.16854.20013

Files

SecuriteInfo.com.Variant.Mikey.130986.16854.20013
.dll windows x86

43a55c2d244fa869779f48427aaa4d6f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmDestroyIMCC
ImmGetRegisterWordStyleW
ImmGetGuideLineW
ImmConfigureIMEW
ImmGetCompositionStringA
ImmIsUIMessageW
ImmSetStatusWindowPos

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

kernel32

EnumResourceTypesA
ReadProcessMemory
VirtualAlloc
GetLastError
SetLastError
OpenProcess

winspool.drv

PrinterProperties
WaitForPrinterChange
EnumJobsW

oleaut32

VarDecFromStr
CreateDispTypeInfo
VarBoolFromUI4
VarI2FromUI1

loadperf

UnloadPerfCounterTextStringsW
UnloadPerfCounterTextStringsA
LoadPerfCounterTextStringsW

mapi32

ord175
ord171
ord67
ord196
ord177

setupapi

SetupDefaultQueueCallbackA
SetupDiGetSelectedDevice
SetupDiGetDriverInstallParamsW
SetupDiGetHwProfileListExA

rpcrt4

NdrSimpleTypeMarshall
NdrNonConformantStringMarshall
NdrDcomAsyncClientCall
RpcBindingInqObject
NdrMesSimpleTypeEncode

mscms

CreateProfileFromLogColorSpaceW
OpenColorProfileW
CheckColors
GetColorProfileElement
CloseColorProfile
CheckBitmapBits
GetColorProfileFromHandle

Exports

Exports

TclpOwkq

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 24B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

43a55c2d244fa869779f48427aaa4d6f

Headers

DLL Characteristics

File Characteristics

Imports

imm32

version

kernel32

winspool.drv

oleaut32

loadperf

mapi32

setupapi

rpcrt4

mscms

Exports

Exports

Sections

.text Size: 26KB - Virtual size: 26KB

.bss Size: - Virtual size: 24B

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 13KB - Virtual size: 13KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 26KB - Virtual size: 26KB

.bss
Size: - Virtual size: 24B

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 13KB - Virtual size: 13KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 2KB - Virtual size: 1KB