SecuriteInfo[.]com[.]Win32[.]PWSX-gen[.]10084[.]1111[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

SecuriteInfo.com.Win32.PWSX-gen.10084.1111.dll
Size

14KB
MD5

f3fdd4b1c32be9414c5b8709d25f2c9b
SHA1

ab90b5e3599a81d7e27d568fb986c09e398f1d00
SHA256

edcb25c8185dfe64d75333c78beac8533745dc6edfe34cfad75d0bd3bca6b057
SHA512

92234f1829a5aed8e02ccd06d850de439889d6757ce00cedbd83177b691bfb5c9458c3d334f474ccde9ddf76be1b4b2e80735fd34d9753dcc62fa92afbaa6de5
SSDEEP

384:FeK7ut3TtJLQb5z8T5abu6yaKCOzswLNQFMD1:IxTtVQ98lfWOzswLWC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.PWSX-gen.10084.1111.dll

Files

SecuriteInfo.com.Win32.PWSX-gen.10084.1111.dll
.dll windows x86

8576330f9aeb41bf60082dc9f971f9a0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrCpyNW
StrRChrIA
StrCmpNIW

kernel32

EnumSystemCodePagesW
GetTimeZoneInformation
SystemTimeToFileTime
FileTimeToSystemTime
VirtualProtect

mapi32

ord140
ord80
ord60
ord129
ord198
ord206
ord54
ord196

pdh

PdhLookupPerfIndexByNameW
PdhOpenQueryW
PdhGetRawCounterArrayW
PdhExpandCounterPathW
PdhComputeCounterStatistics

ws2_32

getprotobynumber
WSACloseEvent
accept
WSACancelBlockingCall
WSAJoinLeaf
setsockopt
gethostname
gethostbyname

winspool.drv

ord201
ord203
GetPrinterDriverA
GetPrinterDataExW

shell32

ExtractIconA
SHAppBarMessage

user32

EnumWindowStationsA
WindowFromDC
GetWindowTextLengthA
GetAltTabInfoA
GetActiveWindow
WinHelpA
EnumDisplayMonitors
LoadKeyboardLayoutA

rtm

RtmDequeueRouteChangeMessage
RtmEnumerateGetNextRoute
MgmGetFirstMfe
RtmDeleteRouteTable
RtmGetNetworkCount
RtmCreateEnumerationHandle

Exports

Exports

JKbtgdfd
_AddDays@8
_DaysBetweenDates@8
_GetEasterSunday@8
_GetFirstWeekdayOfMonth@8
_GetLastWeekday@8
_GetLastWeekdayOfMonth@8
_GetNextWeekday@8
_GetNthDayOfWeekInMonth@20
_GetNthWeekdayOfMonth@12
_GetTimeZoneOffsetInMinutes@0
_IsSameWeek@8
_IsWeekend@4
_fDaysInMonth@8

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8576330f9aeb41bf60082dc9f971f9a0

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

kernel32

mapi32

pdh

ws2_32

winspool.drv

shell32

user32

rtm

Exports

Exports

Sections

.text Size: 2KB - Virtual size: 1KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 8KB - Virtual size: 7KB

.reloc Size: 512B - Virtual size: 124B

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 8KB - Virtual size: 7KB

.reloc
Size: 512B - Virtual size: 124B