SecuriteInfo[.]com[.]Win32[.]PWSX-gen[.]24772[.]24920[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

SecuriteInfo.com.Win32.PWSX-gen.24772.24920.dll
Size

110KB
MD5

f64469a631238b167b0bda1194e85243
SHA1

2b9e24cdb1cf6307cfbc4bc8c25103f2a12acb9d
SHA256

8bb05744062bdf97c8c1c6c0f34d2ff221a9fe04913f4c296a2fdba6d0d48ad1
SHA512

86965a3c57402561b848dbc989d9d25ff93f3ac974ec76dce0e1625a6fc459a8c8b505eb9097e3f2206d3ed4e1cc177b54e9a74824973cede95c19af364924d0
SSDEEP

1536:16nG5JxotYK7jDp1WgLsBju+2AjxurUyFtvUeLljMmTEFu87ZsWeocd7r8uMHews:pxqNwgLsRKAxurxURuqS/8/+1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.PWSX-gen.24772.24920.dll

Files

SecuriteInfo.com.Win32.PWSX-gen.24772.24920.dll
.dll windows x86

41094fb41caff385dbb69f88e1cb11f1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

imm32

ImmReSizeIMCC
ImmGetDescriptionW
ImmGetCompositionFontW
ImmIsIME

kernel32

VirtualAlloc
VirtualFree
GetModuleHandleExW
LoadResource
LockResource
SizeofResource
FindResourceW
DecodePointer
EncodePointer
WriteConsoleW
CreateFileW
CloseHandle
HeapReAlloc
HeapSize
GetStringTypeW
SetFilePointerEx
GetFileSizeEx
SetStdHandle
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetFileType
GetStdHandle
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleFileNameW
HeapFree
HeapAlloc
LCMapStringW
RaiseException

loadperf

UnloadPerfCounterTextStringsA
LoadPerfCounterTextStringsW
LoadPerfCounterTextStringsA

mscms

SetStandardColorSpaceProfileW
GetColorProfileElementTag
SetColorProfileElementSize
TranslateColors
EnumColorProfilesA
CreateMultiProfileTransform

user32

DispatchMessageA
ReuseDDElParam
DlgDirListW
MapWindowPoints

mapi32

ord132
ord181
ord139
ord130
ord80
ord45
ord125

setupapi

SetupScanFileQueueW
SetupCommitFileQueueW

rtm

RtmBlockConvertRoutesToStatic
RtmGetNetworkCount
RtmIsRoute

wsock32

closesocket
ntohs
sendto
getservbyport
__WSAFDIsSet
WEP
connect
ord1116
WSASetBlockingHook

Exports

Exports

HvTkcoed

Sections

.text
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

41094fb41caff385dbb69f88e1cb11f1

Headers

DLL Characteristics

File Characteristics

Imports

imm32

kernel32

loadperf

mscms

user32

mapi32

setupapi

rtm

wsock32

Exports

Exports

Sections

.text Size: 73KB - Virtual size: 72KB

.rdata Size: 27KB - Virtual size: 26KB

.data Size: 2KB - Virtual size: 4KB

.gfids Size: 512B - Virtual size: 208B

.rsrc Size: 6KB - Virtual size: 6KB

.text
Size: 73KB - Virtual size: 72KB

.rdata
Size: 27KB - Virtual size: 26KB

.data
Size: 2KB - Virtual size: 4KB

.gfids
Size: 512B - Virtual size: 208B

.rsrc
Size: 6KB - Virtual size: 6KB