SecuriteInfo[.]com[.]Win32[.]RansomX-gen[.]26190[.]27462[.]exe

General

Target
SecuriteInfo.com.Win32.RansomX-gen.26190.27462.exe
Size 351KB
Sample230723-e3m43adc62
SHA256 127b541a7b46de5491b561efecdfa61b1ebfa655a80d19e11d0a09a0a9733f53
MD5 237f002316e142ac4e7b9d31e8585c00
SHA1 35db03d22c00f45c1c88985c326118290cdc1e62
SHA512 ccdf10c7beec2c6a795a55470e694ada49aca5201239b17d239c3d1afd01d4fb836e7796c13c9a20bf2ad23f2285dc2592ad00cd4fd17e057592e66914134aaa
SSDEEP 6144:58VXLah6a5LFSEqoUFsci9KqRVGNnu+Z1ifHYOGTMMf:OVXmka5LHwFsb9tRVMpZ1iHEM
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.RansomX-gen.26190.27462.exe

File Explorer

SecuriteInfo.com.Win32.RansomX-gen.26190.27462.exe

.exe 351KB

SecuriteInfo.com.Win32.RansomX-gen.26190.27462.exe

IMPHASH cfbfd8ca3fe61cf1ac99b7bb15f4a1e5
SHA256 127b541a7b46de5491b561efecdfa61b1ebfa655a80d19e11d0a09a0a9733f53
MD5 237f002316e142ac4e7b9d31e8585c00
SHA1 35db03d22c00f45c1c88985c326118290cdc1e62
SHA512 ccdf10c7beec2c6a795a55470e694ada49aca5201239b17d239c3d1afd01d4fb836e7796c13c9a20bf2ad23f2285dc2592ad00cd4fd17e057592e66914134aaa
SSDEEP 6144:58VXLah6a5LFSEqoUFsci9KqRVGNnu+Z1ifHYOGTMMf:OVXmka5LHwFsb9tRVMpZ1iHEM
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

26106

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommandLineW GetPrivateProfileSectionNamesW SetDefaultCommConfigA GetConsoleAliasesLengthW _llseek DeleteVolumeMountPointA InterlockedIncrement MoveFileExW GetConsoleAliasA GetProfileStringW SetComputerNameW GetComputerNameW FlushConsoleInputBuffer OpenSemaphoreA BackupSeek FreeEnvironmentStringsA _lcreat GetModuleHandleW CreateNamedPipeW GetWindowsDirectoryA EnumTimeFormatsW GetUserDefaultLangID GetDriveTypeA OpenProcess GlobalAlloc GetPrivateProfileIntA LoadLibraryW GetConsoleAliasExesLengthW GetTimeFormatW TerminateProcess GetOverlappedResult CreateMailslotW GetShortPathNameA GetNamedPipeHandleStateW GetLastError GetCurrentDirectoryW SetLastError GetProcAddress HeapSize MoveFileW _hwrite OpenWaitableTimerA MoveFileA BuildCommDCBAndTimeoutsW SetConsoleCtrlHandler GetPrivateProfileStructA FindNextFileA GetModuleHandleA UpdateResourceW FreeEnvironmentStringsW GetStringTypeW FatalAppExitA SetFileShortNameA ReadConsoleInputW GetVersion FindFirstVolumeW DeleteFileW CreateFileW CloseHandle ReadFile InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer HeapAlloc WideCharToMultiByte MultiByteToWideChar HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW HeapFree RtlUnwind SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess ExitProcess WriteFile GetModuleFileNameW HeapCreate GetCPInfo GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId RaiseException GetModuleFileNameA GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime IsProcessorFeaturePresent SetFilePointer GetConsoleCP GetConsoleMode LCMapStringW FlushFileBuffers SetStdHandle WriteConsoleW DeleteFileA

user32

CharUpperA CharUpperBuffW

Sharing