SecuriteInfo[.]com[.]Win32[.]PWSX-gen[.]19491[.]26060[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.PWSX-gen.19491.26060.exe
Size

176KB
MD5

76c381c92a2c3aab5d89ce7db27b1d44
SHA1

5ab7117071fa75aecb93d91d40b988348d772757
SHA256

67851e4fc08710df92cf6ca5dbf09eaa4e247648e947bad24db854ca789ebf39
SHA512

b807dce25e95a0fe88ab7780075197592edb7fd4b911b0c1e4f040c3c2d4d7f13d3bd2438bf07429835316b131cbe28ff47345bc42d88a5d799dc43945c78904
SSDEEP

3072:yS84Oa6MqYqhZqJj1/GsOoZ18S07EcAfGOAg0FujCmgFUilK:44jDqRHmj1/hZGSvAOTD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.PWSX-gen.19491.26060.exe

Files

SecuriteInfo.com.Win32.PWSX-gen.19491.26060.exe
.exe windows x86

f7aca7eae1bc8ea85a83c7d86feaa68c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
CloseHandle
VirtualAlloc
EnumSystemCodePagesW
HeapSize
GetProcessHeap
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetFileSize
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapReAlloc
ReadConsoleW
GetCommandLineA
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
CreateFileW
GetConsoleOutputCP
FlushFileBuffers
GetFileType
HeapAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
HeapFree
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
WriteFile
GetStdHandle
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
WideCharToMultiByte
LCMapStringEx
GetStringTypeW
GetCPInfo
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
GetCurrentProcess
TerminateProcess
RaiseException
RtlUnwind
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
WriteConsoleW

msi

ord65
ord107
ord28
ord47
ord155
ord82

mswsock

GetNameByTypeW
NPLoadNameSpaces
sethostname
GetTypeByNameW
WSARecvEx
TransmitFile
dn_expand
rexec
GetAddressByNameA

msvfw32

StretchDIB
DrawDibChangePalette
GetSaveFileNamePreviewA

avifil32

AVIStreamInfoA

wsock32

ntohs
WSAAsyncGetHostByName
setsockopt
htons

pdh

PdhGetDataSourceTimeRangeW
PdhMakeCounterPathW
PdhVbCreateCounterPathList
PdhGetDefaultPerfCounterA
PdhGetDefaultPerfObjectW
PdhOpenLogA
PdhLookupPerfIndexByNameW

ole32

OleInitializeWOW
ReadStringStream
CreateStdProgressIndicator
OpenOrCreateStream
ReadClassStm
CreateBindCtx
OleSetAutoConvert

rtm

MgmGetFirstMfe
RtmAddRoute
RtmDeregisterClient
RtmIsRoute

Sections

.text
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f7aca7eae1bc8ea85a83c7d86feaa68c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msi

mswsock

msvfw32

avifil32

wsock32

pdh

ole32

rtm

Sections

.text Size: 113KB - Virtual size: 113KB

.rdata Size: 52KB - Virtual size: 51KB

.data Size: 10KB - Virtual size: 13KB

.text
Size: 113KB - Virtual size: 113KB

.rdata
Size: 52KB - Virtual size: 51KB

.data
Size: 10KB - Virtual size: 13KB