SecuriteInfo[.]com[.]Win32[.]PWSX-gen[.]32110[.]18356[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.PWSX-gen.32110.18356.dll
Size

85KB
MD5

b290215bc95f94de7265dd439a05ab68
SHA1

56be991e5a2230ba02c7702fc4620e9701b4cdcd
SHA256

6143df674b11394c94cbe1c4e1c37ea39bfcf9dbfa89f6933f1386b73b11dd76
SHA512

690d4af76a0a4d4c2595add3c1f9b858fdc7310e0382db867087bbc623e7f15c487da52056a347605d9237c5a784b411b026c4c54e11e1e3b80c13b4e32bfc55
SSDEEP

1536:F06lDf21yHWVOaPGa/u70P3Re+buVH5sWzcdkjFoTteOAGUgtcu:F9f6yHiOaP9u70P3/W2k5g7A5gtcu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.PWSX-gen.32110.18356.dll

Files

SecuriteInfo.com.Win32.PWSX-gen.32110.18356.dll
.dll windows x86

d8c268b35825adf780974f5fe02ef180

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmConfigureIMEA
ImmGetRegisterWordStyleA
ImmUnlockIMC
ImmGetCandidateListCountW

kernel32

CreateFileW
SetFilePointerEx
WriteConsoleW
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
SetStdHandle
HeapReAlloc
HeapSize
GetStringTypeW
K32GetProcessMemoryInfo
EnumSystemCodePagesW
VirtualProtect
GetCurrentProcess
Sleep
GetDiskFreeSpaceExW
CloseHandle
GetFileType
GetStdHandle
GetProcessHeap
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapFree
HeapAlloc
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
TerminateProcess
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
DecodePointer

wininet

CreateUrlCacheContainerW
InternetQueryDataAvailable
ShowX509EncodedCertificate

ws2_32

WSAIsBlocking
WSARemoveServiceClass
WSACleanup
WSAAsyncGetHostByAddr
WSAGetQOSByName
shutdown

resutils

ResUtilSetPrivatePropertyList
ResUtilVerifyService
ResUtilVerifyResourceService
ResUtilFreeParameterBlock

gdi32

SetBoundsRect
AnimatePalette
GdiGetPageCount
RemoveFontMemResourceEx
EnumFontsW
SetWindowExtEx
Pie

rtutils

TracePrintfExA
TraceVprintfExW
MprSetupProtocolFree

user32

RealGetWindowClassW
GetDlgItemTextW
SetClassLongW
GetPriorityClipboardFormat
DlgDirSelectComboBoxExW
DestroyWindow

winspool.drv

FindNextPrinterChangeNotification
DevQueryPrint
ord208
ord202
AddFormA
WaitForPrinterChange

rtm

MgmGetFirstMfe
MgmTakeInterfaceOwnership
RtmGetNetworkCount

pdh

PdhCloseQuery
PdhOpenQueryW
PdhAddCounterW
PdhCollectQueryData
PdhGetFormattedCounterValue

Exports

Exports

JKbtgdfd
_GetCPUUsage@0
_GetDiskIOUsage@0
_GetDiskUsage@0
_GetMemoryUsage@0
_GetNetworkUsage@0

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d8c268b35825adf780974f5fe02ef180

Headers

DLL Characteristics

File Characteristics

Imports

imm32

kernel32

wininet

ws2_32

resutils

gdi32

rtutils

user32

winspool.drv

rtm

pdh

Exports

Exports

Sections

.text Size: 45KB - Virtual size: 45KB

.rdata Size: 24KB - Virtual size: 23KB

.data Size: 10KB - Virtual size: 12KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 45KB - Virtual size: 45KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 10KB - Virtual size: 12KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 4KB - Virtual size: 3KB