HvTkcoed
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.PWSX-gen.6733.23703.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.PWSX-gen.6733.23703.dll
Resource
win10v2004-20230703-en
General
-
Target
SecuriteInfo.com.Win32.PWSX-gen.6733.23703.dll
-
Size
11KB
-
MD5
2fba85e7e1357d792e20a89b3abf2795
-
SHA1
5015d21c4517d214b4b6b2733d7ecff6dd767ef5
-
SHA256
5aec8e75d09ffd3f97aadd75a571d81b1f464d6a6e0021cb102133795988f5ec
-
SHA512
5845847b0582c1a2aae35a0966cdacecdc6f17de48c731d362d1b3949161c3d8b5aac4491656fb7e60824ef745499da601e751408e78b939ff96b47f512bd145
-
SSDEEP
192:IXQtwDizKFsf32i7rC1V8Qm6zF1wTksw:mww2Kk32M+1V8tsy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Win32.PWSX-gen.6733.23703.dll
Files
-
SecuriteInfo.com.Win32.PWSX-gen.6733.23703.dll.dll windows x86
ef426f15136c05e55b613bc027fab15a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvcrt
memcpy
kernel32
VirtualAlloc
GetUserDefaultLangID
FatalAppExitA
SetCurrentDirectoryW
GlobalUnlock
GetCompressedFileSizeW
GetConsoleFontSize
msacm32
acmFormatEnumW
acmDriverDetailsA
acmFormatChooseW
acmStreamConvert
mpr
WNetDisconnectDialog1A
WNetAddConnection3A
WNetAddConnectionW
WNetCancelConnection2W
WNetAddConnection2A
WNetAddConnection2W
WNetGetResourceInformationA
WNetGetResourceInformationW
rtm
MgmDeRegisterMProtocol
RtmGetNextRoute
RtmDeleteRouteTable
RtmBlockConvertRoutesToStatic
wininet
FtpSetCurrentDirectoryW
InternetOpenA
ReadUrlCacheEntryStream
DeleteUrlCacheGroup
InternetCheckConnectionW
FindFirstUrlCacheContainerW
FtpRenameFileW
CommitUrlCacheEntryA
rpcrt4
CStdStubBuffer_Connect
I_RpcNsInterfaceExported
NdrMesSimpleTypeAlignSize
I_RpcConnectionSetSockBuffSize
comdlg32
ChooseColorW
CommDlgExtendedError
PageSetupDlgA
GetOpenFileNameW
FindTextW
GetFileTitleW
PrintDlgW
GetFileTitleA
Exports
Exports
Sections
.text Size: 512B - Virtual size: 445B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 108B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ