SecuriteInfo[.]com[.]Win32[.]PWSX-gen[.]16201[.]28112[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.PWSX-gen.16201.28112.dll
Size

110KB
MD5

61032c3fe799c4acb61555f776af970b
SHA1

137f74b156df478fa37f1d7828c566d8fea1cccc
SHA256

8ed599b2a0f542f650a82f33bab1823a015da59683eda2418adc21e094d094cd
SHA512

e688ba37822ffe32d19f3010f97af5f0dbfc4f84d727e75d054161e4f60950a9f66733f1ddcf84649f73082379789ab8beddd670a396981e8d6a4d91aa60f13f
SSDEEP

1536:k6nG5JxotYK7jDp1WgLsBju+2AjxurUyFtvUeLljMmTEFu87ZsWeocd7r3LMHDwM:6xqNwgLsRKAxurxURuqS/3Yj2jNq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.PWSX-gen.16201.28112.dll

Files

SecuriteInfo.com.Win32.PWSX-gen.16201.28112.dll
.dll windows x86

41094fb41caff385dbb69f88e1cb11f1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

imm32

ImmReSizeIMCC
ImmGetDescriptionW
ImmGetCompositionFontW
ImmIsIME

kernel32

VirtualAlloc
VirtualFree
GetModuleHandleExW
LoadResource
LockResource
SizeofResource
FindResourceW
DecodePointer
EncodePointer
WriteConsoleW
CreateFileW
CloseHandle
HeapReAlloc
HeapSize
GetStringTypeW
SetFilePointerEx
GetFileSizeEx
SetStdHandle
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetFileType
GetStdHandle
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleFileNameW
HeapFree
HeapAlloc
LCMapStringW
RaiseException

loadperf

UnloadPerfCounterTextStringsA
LoadPerfCounterTextStringsW
LoadPerfCounterTextStringsA

mscms

SetStandardColorSpaceProfileW
GetColorProfileElementTag
SetColorProfileElementSize
TranslateColors
EnumColorProfilesA
CreateMultiProfileTransform

user32

DispatchMessageA
ReuseDDElParam
DlgDirListW
MapWindowPoints

mapi32

ord132
ord181
ord139
ord130
ord80
ord45
ord125

setupapi

SetupScanFileQueueW
SetupCommitFileQueueW

rtm

RtmBlockConvertRoutesToStatic
RtmGetNetworkCount
RtmIsRoute

wsock32

closesocket
ntohs
sendto
getservbyport
__WSAFDIsSet
WEP
connect
ord1116
WSASetBlockingHook

Exports

Exports

HvTkcoed

Sections

.text
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

41094fb41caff385dbb69f88e1cb11f1

Headers

DLL Characteristics

File Characteristics

Imports

imm32

kernel32

loadperf

mscms

user32

mapi32

setupapi

rtm

wsock32

Exports

Exports

Sections

.text Size: 73KB - Virtual size: 72KB

.rdata Size: 27KB - Virtual size: 26KB

.data Size: 2KB - Virtual size: 4KB

.gfids Size: 512B - Virtual size: 208B

.rsrc Size: 6KB - Virtual size: 6KB

.text
Size: 73KB - Virtual size: 72KB

.rdata
Size: 27KB - Virtual size: 26KB

.data
Size: 2KB - Virtual size: 4KB

.gfids
Size: 512B - Virtual size: 208B

.rsrc
Size: 6KB - Virtual size: 6KB