HvTkcoed
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.PWSX-gen.6628.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.PWSX-gen.6628.dll
Resource
win10v2004-20230703-en
General
-
Target
SecuriteInfo.com.Win32.PWSX-gen.6628.2822
-
Size
88KB
-
MD5
d19fbc1ad18313be46c3310cb86cae28
-
SHA1
82f67a1977e27cedd5ea020cb2d5986fe6140f07
-
SHA256
57ff862126ef6c164909978bdd548bb5b1900ad3294fb7a25abc28b807b48614
-
SHA512
2abb45c57b4e98e193e646b81f2997860aed4f21692995061f86621bc1b0b79aab7bab22ebec9c2dd14ab6bce649b2744c95d748adf59682e56a618ff45e1103
-
SSDEEP
1536:RN/SnqpFxn09e2LFUQKsKLjxkflHlX8/S0ElsWeWcd+WoL/50iMCbW:X6GFxnA1LFFOLjKE/Lv+WoL/ailbW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Win32.PWSX-gen.6628.2822
Files
-
SecuriteInfo.com.Win32.PWSX-gen.6628.2822.dll windows x86
9de2c5f4e7412eda6daeaef638405b83
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateFileW
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
SetStdHandle
HeapReAlloc
HeapSize
GetStringTypeW
GetStdHandle
GetProcessHeap
CloseHandle
VirtualFree
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
WriteConsoleW
FindResourceW
SizeofResource
LockResource
LoadResource
GetModuleHandleExW
VirtualAlloc
TerminateJobObject
GetCommConfig
FindNextFileW
FindFirstFileExW
FindClose
HeapFree
GetFileType
WritePrivateProfileStringW
HeapAlloc
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
ExitProcess
GetModuleFileNameW
DecodePointer
loadperf
UnloadPerfCounterTextStringsA
LoadPerfCounterTextStringsW
UnloadPerfCounterTextStringsW
odbc32
ord108
ord207
ord152
ord236
ord211
PostODBCComponentError
urlmon
URLDownloadA
CoInternetCompareUrl
UrlMkGetSessionOption
HlinkGoBack
setupapi
SetupFindNextMatchLineW
SetupDiSetDeviceRegistryPropertyA
SetupCloseInfFile
SetupDiGetHwProfileFriendlyNameExW
SetupRenameErrorW
SetupRemoveInstallSectionFromDiskSpaceListW
SetupDeleteErrorW
SetupAddToDiskSpaceListW
ole32
HMETAFILEPICT_UserUnmarshal
OleConvertIStorageToOLESTREAM
HMETAFILE_UserSize
StringFromIID
CLSIDFromProgID
rtutils
TraceDumpExA
RouterLogRegisterA
LogEventW
TracePutsExW
TracePrintfExW
TraceRegisterExW
crypt32
CryptDecodeObject
CertSetCTLContextProperty
CertGetIssuerCertificateFromStore
CryptSetOIDFunctionValue
CertFindCTLInStore
CryptHashPublicKeyInfo
avifil32
AVIStreamRead
EditStreamSetName
avicap32
capCreateCaptureWindowW
videoThunk32
msvfw32
ICRemove
ICCompress
ICSendMessage
ICSeqCompressFrameEnd
Exports
Exports
Sections
.text Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ