SecuriteInfo[.]com[.]Win32[.]AdwareX-gen[.]15597[.]8848[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.AdwareX-gen.15597.8848.dll
Size

10KB
MD5

10e6d917ffbc66c50bdb19d95dfb64d6
SHA1

5a33f16e5e4606445168c214ab2be9655cbadf47
SHA256

bd388ca3609ccf7f6f2f8fb352490accc916eb56d50660f9c0bc89bfa5410f0d
SHA512

f42acafcfc5cbade7917efe016a241487e1feb2c8b59fc87245d532df7563282b4cbd3df6d9064220333106052e71c128681da3aa22332cbfd6378235bdca5e5
SSDEEP

192:GX+Yi17eMjHI139qpDa8MaDp70tVZH8zzLqYDH1xoWPChVF3:GzUHI1R8NCqL/XoWKhv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.AdwareX-gen.15597.8848.dll

Files

SecuriteInfo.com.Win32.AdwareX-gen.15597.8848.dll
.dll windows x86

3c387e33a7f32adeae0ddccc8115f63b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_initterm
free
_adjust_fdiv
malloc

kernel32

VirtualFree
GetModuleHandleA
GetProcAddress

loadperf

LoadPerfCounterTextStringsW
UnloadPerfCounterTextStringsW
UnloadPerfCounterTextStringsA

setupapi

SetupDiGetDriverInstallParamsW
SetupCloseInfFile
SetupDiGetSelectedDriverA
SetupGetLineByIndexW

mpr

WNetOpenEnumW
WNetGetUserW
WNetGetNetworkInformationW

wsnmp32

ord601
ord100
ord202

comdlg32

FindTextW
GetSaveFileNameW
GetFileTitleW
ReplaceTextW
ChooseFontW

user32

RegisterClassA
ShowWindowAsync
DrawTextExA
SetParent

Exports

Exports

Fosklcks

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ