SecuriteInfo[.]com[.]Win32[.]RansomX-gen[.]18300[.]31131[.]exe

General

Target
SecuriteInfo.com.Win32.RansomX-gen.18300.31131.exe
Size 351KB
Sample230723-bt375sch65
SHA256 6c1db78d78510a26869a0c1719396ec0151beb97ed7aa868d2bba9094d670565
MD5 fff2f00fa9387530fb724fb44855b4f3
SHA1 ddf32749cab4d8f9bd07d16980bb4e946bb75d6d
SHA512 692fb964d66228b3138b3cf4b07cb3959f9db6dbdddc094a5223afa97c676a3fe6a6633c0d5cff23a367501b21854bfab6fcbd1b350d794a8633f5a0eea6c261
SSDEEP 6144:RVjX0ahHvBVF79h7r7AoAsn56ZvYrIJ9VW1NM:jjXdVvBVT5A65pY81NM
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.RansomX-gen.18300.31131.exe

File Explorer

SecuriteInfo.com.Win32.RansomX-gen.18300.31131.exe

.exe 351KB

SecuriteInfo.com.Win32.RansomX-gen.18300.31131.exe

IMPHASH cfbfd8ca3fe61cf1ac99b7bb15f4a1e5
SHA256 6c1db78d78510a26869a0c1719396ec0151beb97ed7aa868d2bba9094d670565
MD5 fff2f00fa9387530fb724fb44855b4f3
SHA1 ddf32749cab4d8f9bd07d16980bb4e946bb75d6d
SHA512 692fb964d66228b3138b3cf4b07cb3959f9db6dbdddc094a5223afa97c676a3fe6a6633c0d5cff23a367501b21854bfab6fcbd1b350d794a8633f5a0eea6c261
SSDEEP 6144:RVjX0ahHvBVF79h7r7AoAsn56ZvYrIJ9VW1NM:jjXdVvBVT5A65pY81NM
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

26106

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommandLineW GetPrivateProfileSectionNamesW SetDefaultCommConfigA GetConsoleAliasesLengthW _llseek DeleteVolumeMountPointA InterlockedIncrement MoveFileExW GetConsoleAliasA GetProfileStringW SetComputerNameW GetComputerNameW FlushConsoleInputBuffer OpenSemaphoreA BackupSeek FreeEnvironmentStringsA _lcreat GetModuleHandleW CreateNamedPipeW GetWindowsDirectoryA EnumTimeFormatsW GetUserDefaultLangID GetDriveTypeA OpenProcess GlobalAlloc GetPrivateProfileIntA LoadLibraryW GetConsoleAliasExesLengthW GetTimeFormatW TerminateProcess GetOverlappedResult CreateMailslotW GetShortPathNameA GetNamedPipeHandleStateW GetLastError GetCurrentDirectoryW SetLastError GetProcAddress HeapSize MoveFileW _hwrite OpenWaitableTimerA MoveFileA BuildCommDCBAndTimeoutsW SetConsoleCtrlHandler GetPrivateProfileStructA FindNextFileA GetModuleHandleA UpdateResourceW FreeEnvironmentStringsW GetStringTypeW FatalAppExitA SetFileShortNameA ReadConsoleInputW GetVersion FindFirstVolumeW DeleteFileW CreateFileW CloseHandle ReadFile InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer HeapAlloc WideCharToMultiByte MultiByteToWideChar HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW HeapFree RtlUnwind SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess ExitProcess WriteFile GetModuleFileNameW HeapCreate GetCPInfo GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId RaiseException GetModuleFileNameA GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime IsProcessorFeaturePresent SetFilePointer GetConsoleCP GetConsoleMode LCMapStringW FlushFileBuffers SetStdHandle WriteConsoleW DeleteFileA

user32

CharUpperA CharUpperBuffW

Sharing