SecuriteInfo[.]com[.]Win32[.]TrojanX-gen[.]9298[.]28968

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.TrojanX-gen.9298.28968
Size

90KB
MD5

17d236d418e5277b86799fd7dd3d98e3
SHA1

92aca3958e5426189b150ddfab1bb0f2e0cf9dfa
SHA256

391c86759a14148b8aae958d656557ccee88cb4e415cea18f9272a16a7f5d551
SHA512

f0049fbf42c67e27f136bfa636e669a73c186f5f6b127ef0730e32587729000bf38913cd02fbe9b25813cfcdda26b144a52976be361e7bb512a9b7349ca4bb72
SSDEEP

1536:hlHRGZPvU5tww+9uyads7t9qKgb5Y62ur7oPUmT8tYu8K698tsWrnwcdbBlitpg6:hRHfwdadsbqLbB7oPe56ybBliWzI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.TrojanX-gen.9298.28968

Files

SecuriteInfo.com.Win32.TrojanX-gen.9298.28968
.dll windows x86

fb8a80b0fe085dc3c95842d94bc1ac66

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

imm32

ImmGetRegisterWordStyleA
ImmIsIME
ImmGetRegisterWordStyleW
ImmSetCompositionStringA
ImmGetDescriptionA
ImmGetGuideLineW
ImmGetIMCCSize
ImmReleaseContext

kernel32

LCMapStringW
GetThreadTimes
FindAtomA
GetProfileStringA
SetErrorMode
DosDateTimeToFileTime
VirtualAlloc
VirtualFree
GetModuleHandleExW
LoadResource
LockResource
SizeofResource
FindResourceW
DecodePointer
EncodePointer
WriteConsoleW
CloseHandle
CreateFileW
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
SetStdHandle
HeapReAlloc
HeapSize
GetStringTypeW
GetFileType
GetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleFileNameW
HeapFree
HeapAlloc
RaiseException

urlmon

CoInternetGetSecurityUrl
CoInternetParseUrl
URLOpenPullStreamW
IsLoggingEnabledA
BindAsyncMoniker
RegisterFormatEnumerator
RegisterBindStatusCallback
URLOpenStreamA

wininet

CreateUrlCacheContainerA
InternetSetOptionW
InternetOpenW
InternetSetStatusCallback
InternetAttemptConnect
HttpSendRequestW
InternetAutodialHangup
FtpDeleteFileA

pdh

PdhGetDllVersion
PdhGetDefaultPerfCounterA
PdhGetCounterInfoW
PdhOpenQuery
PdhGetDefaultPerfCounterW
PdhOpenLogW
PdhSelectDataSourceW

wsnmp32

ord105
ord400
ord220
ord606
ord501
ord600
ord202
ord401
ord906

msacm32

acmFilterTagDetailsW
acmDriverDetailsW
acmDriverID
acmDriverAddW
acmFormatSuggest
acmFormatTagEnumW
acmFormatEnumW

Exports

Exports

HvTkcoed

Sections

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fb8a80b0fe085dc3c95842d94bc1ac66

Headers

DLL Characteristics

File Characteristics

Imports

imm32

kernel32

urlmon

wininet

pdh

wsnmp32

msacm32

Exports

Exports

Sections

.text Size: 51KB - Virtual size: 50KB

.rdata Size: 24KB - Virtual size: 24KB

.data Size: 2KB - Virtual size: 4KB

.gfids Size: 512B - Virtual size: 208B

.rsrc Size: 6KB - Virtual size: 6KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 51KB - Virtual size: 50KB

.rdata
Size: 24KB - Virtual size: 24KB

.data
Size: 2KB - Virtual size: 4KB

.gfids
Size: 512B - Virtual size: 208B

.rsrc
Size: 6KB - Virtual size: 6KB

.reloc
Size: 4KB - Virtual size: 3KB