HvTkcoed
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.MalwareX-gen.30206.13882.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.MalwareX-gen.30206.13882.dll
Resource
win10v2004-20230703-en
General
-
Target
SecuriteInfo.com.Win32.MalwareX-gen.30206.13882.dll
-
Size
22KB
-
MD5
d9c523fb5f89af06ede9c36d6ac4d067
-
SHA1
581110a150523241f5c38d2514ab0cfe969c6200
-
SHA256
b5202e397d9dd3ebe764858eff1a98a679044f726ae19efe44ab099bb87e7a03
-
SHA512
7fa852711dc3d756e1ed620b2ecfaf88a255621657eae213e7de72eec111921252b7d6a4ad0176040b7c0e432e2f14265f3c0a6627ebe464ab43ebd13c9300e0
-
SSDEEP
384:EiyQek0uSk2p8wdhYXzs/st5h5mjHaA1sgdPb3iyAivKz45SbG4th+Z:EfQ/vz2p8wdhYXYUt5h5mjHaAXPbz7Lh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Win32.MalwareX-gen.30206.13882.dll
Files
-
SecuriteInfo.com.Win32.MalwareX-gen.30206.13882.dll.dll windows x86
a4dcc6b6d18fcc449f6902d126361422
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvcrt
free
__dllonexit
_adjust_fdiv
malloc
_initterm
memset
memcpy
_onexit
shlwapi
StrCatW
SHDeleteValueA
PathIsFileSpecW
PathIsURLW
SHDeleteKeyA
PathStripPathW
SHOpenRegStreamW
SHDeleteKeyW
kernel32
lstrlenW
CreateSemaphoreA
GetTimeFormatW
GetConsoleScreenBufferInfo
GetTempFileNameA
VirtualAlloc
mpr
WNetAddConnection2W
WNetCancelConnectionW
WNetConnectionDialog1W
WNetGetUserA
WNetAddConnection3A
msvfw32
GetOpenFileNamePreviewA
ICImageCompress
ICOpen
avifil32
AVIFileOpenW
AVIMakeFileFromStreams
AVIStreamSetFormat
AVIFileOpenA
EditStreamClone
gdi32
GetFontAssocStatus
SetBitmapDimensionEx
SetViewportExtEx
Chord
EudcLoadLinkW
GdiEndDocEMF
SetRelAbs
GetTextExtentPoint32W
GetDeviceGammaRamp
odbc32
ord30
ord2
ord35
ord32
ord38
ord127
ord23
Exports
Exports
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE