SecuriteInfo[.]com[.]Win32[.]PWSX-gen[.]19916[.]2719[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.PWSX-gen.19916.2719.dll
Size

34KB
MD5

ada3a83cd4773b6a55c21f95ac5b6418
SHA1

49b396e767ffb869b09d9afeb3aa2c903864b463
SHA256

f8254fb47869f88b6bac32008c47b3aaad33bfa1d15ccf7b09a243aa52476773
SHA512

70232c8555cfe911729cb889afe1b321c4421ea7b946059d47167bd1e72f5eb27ffe1b2d1bde6aab6453fdbface58c45167c5059bd1de5c964a3b73dfac99f7c
SSDEEP

768:l1wiCRLQXVuvCS/z5j583KTG94n1Ou5KM2vauZEjxK97n+PL6fhK4rejK18:l1wieOuvCS7BKTxCDcFm2hK4rejD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.PWSX-gen.19916.2719.dll

Files

SecuriteInfo.com.Win32.PWSX-gen.19916.2719.dll
.dll windows x86

969ed979bcbb9cc9e109e354589ac767

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

malloc
_adjust_fdiv
memset
free
memcpy
_initterm

shlwapi

StrRStrIW
PathRemoveExtensionA
UrlEscapeW
PathUnquoteSpacesW
PathRemoveBlanksA
PathIsFileSpecW
StrStrW
SHRegSetUSValueW
StrFromTimeIntervalA

kernel32

InitializeCriticalSection
lstrlenW
VirtualAlloc

wininet

InternetLockRequestFile
InternetCrackUrlA
InternetOpenUrlW
RetrieveUrlCacheEntryStreamA
FindNextUrlCacheContainerW
ShowSecurityInfo
IncrementUrlCacheHeaderData

loadperf

LoadPerfCounterTextStringsA
UnloadPerfCounterTextStringsW
UnloadPerfCounterTextStringsA

shell32

SHGetFileInfoW
ExtractAssociatedIconExW
ExtractIconA
ShellExecuteW
SHGetDesktopFolder

mscms

CheckBitmapBits
SpoolerCopyFileEvent
TranslateColors
OpenColorProfileW
UninstallColorProfileW
IsColorProfileValid
GetPS2ColorRenderingIntent

user32

SendInput
LoadMenuW
wsprintfW
UnloadKeyboardLayout
MapDialogRect
IMPSetIMEW
SetMenuItemInfoW
LoadAcceleratorsA
CloseWindow

pdh

PdhAddCounterW
PdhBrowseCountersW
PdhGetDataSourceTimeRangeW
PdhGetFormattedCounterArrayA
PdhConnectMachineA
PdhGetFormattedCounterArrayW
PdhUpdateLogA
PdhEnumMachinesW

ole32

ReadClassStm
OleQueryCreateFromData
OleCreateFromFileEx
ReadStringStream
UtGetDvtd32Info
OleLoad
UtConvertDvtd16toDvtd32

Exports

Exports

HvTkcoed

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

969ed979bcbb9cc9e109e354589ac767

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

shlwapi

kernel32

wininet

loadperf

shell32

mscms

user32

pdh

ole32

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 8KB - Virtual size: 7KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 8KB - Virtual size: 7KB