SecuriteInfo[.]com[.]Win32[.]InjectorX-gen[.]13320[.]2607[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.InjectorX-gen.13320.2607.dll
Size

110KB
MD5

4f3c28e8dc53736450a49f86cd86554f
SHA1

ef851b83872de57293642f79db1e031e87ee73b7
SHA256

d97e48ce4a01b977e2f65bc20ac1fce0e72347a05a278ac2a5a58300cbc984a8
SHA512

d8e03d955afa84d0e7050a88ea456f759f0b97dedee5c408f08ae5c23a6f136a815e2914e630510271ce4f1e91d570d4ca018c5703b9016e655d439baa25108f
SSDEEP

1536:Z6nG5JxotYK7jDp1WgLsBju+2AjxurUyFtvUeLljMmTEFu87ZsWeocd7rM+MHWyD:txqNwgLsRKAxurxURuqS/MP2ccQV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.InjectorX-gen.13320.2607.dll

Files

SecuriteInfo.com.Win32.InjectorX-gen.13320.2607.dll
.dll windows x86

41094fb41caff385dbb69f88e1cb11f1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

imm32

ImmReSizeIMCC
ImmGetDescriptionW
ImmGetCompositionFontW
ImmIsIME

kernel32

VirtualAlloc
VirtualFree
GetModuleHandleExW
LoadResource
LockResource
SizeofResource
FindResourceW
DecodePointer
EncodePointer
WriteConsoleW
CreateFileW
CloseHandle
HeapReAlloc
HeapSize
GetStringTypeW
SetFilePointerEx
GetFileSizeEx
SetStdHandle
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetFileType
GetStdHandle
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleFileNameW
HeapFree
HeapAlloc
LCMapStringW
RaiseException

loadperf

UnloadPerfCounterTextStringsA
LoadPerfCounterTextStringsW
LoadPerfCounterTextStringsA

mscms

SetStandardColorSpaceProfileW
GetColorProfileElementTag
SetColorProfileElementSize
TranslateColors
EnumColorProfilesA
CreateMultiProfileTransform

user32

DispatchMessageA
ReuseDDElParam
DlgDirListW
MapWindowPoints

mapi32

ord132
ord181
ord139
ord130
ord80
ord45
ord125

setupapi

SetupScanFileQueueW
SetupCommitFileQueueW

rtm

RtmBlockConvertRoutesToStatic
RtmGetNetworkCount
RtmIsRoute

wsock32

closesocket
ntohs
sendto
getservbyport
__WSAFDIsSet
WEP
connect
ord1116
WSASetBlockingHook

Exports

Exports

HvTkcoed

Sections

.text
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

41094fb41caff385dbb69f88e1cb11f1

Headers

DLL Characteristics

File Characteristics

Imports

imm32

kernel32

loadperf

mscms

user32

mapi32

setupapi

rtm

wsock32

Exports

Exports

Sections

.text Size: 73KB - Virtual size: 72KB

.rdata Size: 27KB - Virtual size: 26KB

.data Size: 2KB - Virtual size: 4KB

.gfids Size: 512B - Virtual size: 208B

.rsrc Size: 6KB - Virtual size: 6KB

.text
Size: 73KB - Virtual size: 72KB

.rdata
Size: 27KB - Virtual size: 26KB

.data
Size: 2KB - Virtual size: 4KB

.gfids
Size: 512B - Virtual size: 208B

.rsrc
Size: 6KB - Virtual size: 6KB