SecuriteInfo[.]com[.]Win32[.]TrojanX-gen[.]12747[.]20990

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.TrojanX-gen.12747.20990
Size

44KB
MD5

4ed0397b5b968b53dfc4df6b887f44d2
SHA1

67651d314365d3f3b767c3c01d132bf0559fc8b2
SHA256

ab65ec9d27cd7b1024d1eed8dfecac58a918e8e4c3e97206112051711beec34a
SHA512

f9eccc28ae881b26a4b2b8a40c743a98d72e004ed9f62015ff0c218aa3780d50ccaeccb212c2b0fe1ee1c480badf0039d339915b83e2c9566e92b03be51d4344
SSDEEP

768:BwKnDLdSmnEioglJsUcQ8UMk1V0rMRyc9VVgcy42J949JM+wdLf:qKNHOglJs9+hRD9VRy42J9OJ0dLf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.TrojanX-gen.12747.20990

Files

SecuriteInfo.com.Win32.TrojanX-gen.12747.20990
.dll windows x86

776ef6f7d9898064a1a9c991c9fb0f47

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualFree
HeapSize
LCMapStringW
GetModuleHandleA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
GetLocaleInfoA
LCMapStringA
RtlUnwind
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetProcAddress
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
WriteFile
HeapReAlloc
VirtualAlloc
HeapAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapDestroy
HeapCreate
GetEnvironmentStringsW
GetCurrentThreadId
GetCommandLineA
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
HeapFree
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte

msi

ord107
ord47
ord155
ord28
ord82
ord65

mswsock

NPLoadNameSpaces
WSARecvEx
GetNameByTypeW
dn_expand
GetAddressByNameA
GetTypeByNameW
TransmitFile

msvfw32

GetSaveFileNamePreviewA
StretchDIB
DrawDibChangePalette

avifil32

AVIStreamInfoA

wsock32

ntohs
WSAAsyncGetHostByName
setsockopt
htons

pdh

PdhGetDataSourceTimeRangeW
PdhMakeCounterPathW
PdhVbCreateCounterPathList
PdhGetDefaultPerfCounterA
PdhLookupPerfIndexByNameW
PdhOpenLogA
PdhGetDefaultPerfObjectW

ole32

ReadStringStream
CreateStdProgressIndicator
OpenOrCreateStream
ReadClassStm
CreateBindCtx
OleSetAutoConvert
OleInitializeWOW

rtm

RtmIsRoute
RtmAddRoute
MgmGetFirstMfe
RtmDeregisterClient

Exports

Exports

Fosklcks

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

776ef6f7d9898064a1a9c991c9fb0f47

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msi

mswsock

msvfw32

avifil32

wsock32

pdh

ole32

rtm

Exports

Exports

Sections

.text Size: 26KB - Virtual size: 25KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 3KB - Virtual size: 6KB

.rsrc Size: 6KB - Virtual size: 5KB

.text
Size: 26KB - Virtual size: 25KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 6KB - Virtual size: 5KB