SecuriteInfo[.]com[.]Win32[.]PWSX-gen[.]15882[.]32711[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.PWSX-gen.15882.32711.dll
Size

85KB
MD5

e9341b489dc1ea101e447378804826db
SHA1

07f4fc28edcac6832f5aec96cfb3809bfd200fb9
SHA256

17c67587da119adcede8533d4b2457bb2524a6e508ce6c07c2f261d8d7a32720
SHA512

d7f245cb3e8a4e2c743af3a62273ed78700bcf7e668a7d968ca0939eca2dcbab296bde806221890969011983eb8dfc2ffc992d899404466df956e11cbfd214b9
SSDEEP

1536:hRxqlNBeBVCCdnX01NH6vGavuLUPXTMR+buVH5sWzcdk2FoTtejwfsgtcu:hhrCCJENH6vNuLUPXjW2kogyLgtcu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.PWSX-gen.15882.32711.dll

Files

SecuriteInfo.com.Win32.PWSX-gen.15882.32711.dll
.dll windows x86

d8c268b35825adf780974f5fe02ef180

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmConfigureIMEA
ImmGetRegisterWordStyleA
ImmUnlockIMC
ImmGetCandidateListCountW

kernel32

CreateFileW
SetFilePointerEx
WriteConsoleW
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
SetStdHandle
HeapReAlloc
HeapSize
GetStringTypeW
K32GetProcessMemoryInfo
EnumSystemCodePagesW
VirtualProtect
GetCurrentProcess
Sleep
GetDiskFreeSpaceExW
CloseHandle
GetFileType
GetStdHandle
GetProcessHeap
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapFree
HeapAlloc
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
TerminateProcess
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
DecodePointer

wininet

CreateUrlCacheContainerW
InternetQueryDataAvailable
ShowX509EncodedCertificate

ws2_32

WSAIsBlocking
WSARemoveServiceClass
WSACleanup
WSAAsyncGetHostByAddr
WSAGetQOSByName
shutdown

resutils

ResUtilSetPrivatePropertyList
ResUtilVerifyService
ResUtilVerifyResourceService
ResUtilFreeParameterBlock

gdi32

SetBoundsRect
AnimatePalette
GdiGetPageCount
RemoveFontMemResourceEx
EnumFontsW
SetWindowExtEx
Pie

rtutils

TracePrintfExA
TraceVprintfExW
MprSetupProtocolFree

user32

RealGetWindowClassW
GetDlgItemTextW
SetClassLongW
GetPriorityClipboardFormat
DlgDirSelectComboBoxExW
DestroyWindow

winspool.drv

FindNextPrinterChangeNotification
DevQueryPrint
ord208
ord202
AddFormA
WaitForPrinterChange

rtm

MgmGetFirstMfe
MgmTakeInterfaceOwnership
RtmGetNetworkCount

pdh

PdhCloseQuery
PdhOpenQueryW
PdhAddCounterW
PdhCollectQueryData
PdhGetFormattedCounterValue

Exports

Exports

JKbtgdfd
_GetCPUUsage@0
_GetDiskIOUsage@0
_GetDiskUsage@0
_GetMemoryUsage@0
_GetNetworkUsage@0

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d8c268b35825adf780974f5fe02ef180

Headers

DLL Characteristics

File Characteristics

Imports

imm32

kernel32

wininet

ws2_32

resutils

gdi32

rtutils

user32

winspool.drv

rtm

pdh

Exports

Exports

Sections

.text Size: 45KB - Virtual size: 45KB

.rdata Size: 24KB - Virtual size: 23KB

.data Size: 10KB - Virtual size: 12KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 45KB - Virtual size: 45KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 10KB - Virtual size: 12KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 4KB - Virtual size: 3KB