SecuriteInfo[.]com[.]Win32[.]AdwareX-gen[.]7897[.]22817 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.AdwareX-gen.7897.22817
Size

10KB
MD5

1f64874262210b49fbbb46e6e1ed0e35
SHA1

b0b4024fa733c07bd766a46cdac5d6636694092c
SHA256

d3eff07b2aa8a46e56c8af2cd701fa7456c6336760b614e8a2bfdc2462cc29cf
SHA512

d9ff3584a99742f8dc1f3e0a1d2e6254d4fecc1ef51b8a93c6e0e1067b48b36276bcec50a9a6512f6fd753460fa8020732d0e00270657f58235ba969af332e26
SSDEEP

192:SX+Yit7eMiIvERgJhh6krIaLa+BuMPJkjpw8zG9p:SzKsRgJVrIaLaaDkjpqp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.AdwareX-gen.7897.22817

Files

SecuriteInfo.com.Win32.AdwareX-gen.7897.22817
.dll windows x86

3c387e33a7f32adeae0ddccc8115f63b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_initterm
free
_adjust_fdiv
malloc

kernel32

VirtualFree
GetModuleHandleA
GetProcAddress

loadperf

LoadPerfCounterTextStringsW
UnloadPerfCounterTextStringsW
UnloadPerfCounterTextStringsA

setupapi

SetupDiGetDriverInstallParamsW
SetupCloseInfFile
SetupDiGetSelectedDriverA
SetupGetLineByIndexW

mpr

WNetOpenEnumW
WNetGetUserW
WNetGetNetworkInformationW

wsnmp32

ord601
ord100
ord202

comdlg32

FindTextW
GetSaveFileNameW
GetFileTitleW
ReplaceTextW
ChooseFontW

user32

RegisterClassA
ShowWindowAsync
DrawTextExA
SetParent

Exports

Exports

Fosklcks

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ