SecuriteInfo[.]com[.]Win32[.]PWSX-gen[.]1093[.]499

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.PWSX-gen.1093.499
Size

176KB
MD5

05b75e64d5283e41dbacbdf2462bf4fa
SHA1

b495c87753dd3ad3a762328693ff3b34dc6bfe2b
SHA256

bfdb291b7b7f3b011cbc5ef12aa1d38dfcd9614a15cc5c21e2cad4f81f9540d7
SHA512

afe3f0fd8956b0f1000c547daf13c34b81bacef533aa6cca8ddd5789fa881cc8e9a9debfdb4ad92c60b4c52e110713503ab820ed792c79e328028a26207f6bc6
SSDEEP

3072:GZcjZd9MOyUfDRJJwKDGUOeX9r50dcAfGOAg0FujxmgS8c:RjbiOprRbwKDDNrWAOM8c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.PWSX-gen.1093.499

Files

SecuriteInfo.com.Win32.PWSX-gen.1093.499
.exe windows x86

f7aca7eae1bc8ea85a83c7d86feaa68c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
CloseHandle
VirtualAlloc
EnumSystemCodePagesW
HeapSize
GetProcessHeap
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetFileSize
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapReAlloc
ReadConsoleW
GetCommandLineA
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
CreateFileW
GetConsoleOutputCP
FlushFileBuffers
GetFileType
HeapAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
HeapFree
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
WriteFile
GetStdHandle
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
WideCharToMultiByte
LCMapStringEx
GetStringTypeW
GetCPInfo
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
GetCurrentProcess
TerminateProcess
RaiseException
RtlUnwind
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
WriteConsoleW

msi

ord65
ord107
ord28
ord47
ord155
ord82

mswsock

GetNameByTypeW
NPLoadNameSpaces
sethostname
GetTypeByNameW
WSARecvEx
TransmitFile
dn_expand
rexec
GetAddressByNameA

msvfw32

StretchDIB
DrawDibChangePalette
GetSaveFileNamePreviewA

avifil32

AVIStreamInfoA

wsock32

ntohs
WSAAsyncGetHostByName
setsockopt
htons

pdh

PdhGetDataSourceTimeRangeW
PdhMakeCounterPathW
PdhVbCreateCounterPathList
PdhGetDefaultPerfCounterA
PdhGetDefaultPerfObjectW
PdhOpenLogA
PdhLookupPerfIndexByNameW

ole32

OleInitializeWOW
ReadStringStream
CreateStdProgressIndicator
OpenOrCreateStream
ReadClassStm
CreateBindCtx
OleSetAutoConvert

rtm

MgmGetFirstMfe
RtmAddRoute
RtmDeregisterClient
RtmIsRoute

Sections

.text
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f7aca7eae1bc8ea85a83c7d86feaa68c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msi

mswsock

msvfw32

avifil32

wsock32

pdh

ole32

rtm

Sections

.text Size: 113KB - Virtual size: 113KB

.rdata Size: 52KB - Virtual size: 51KB

.data Size: 10KB - Virtual size: 13KB

.text
Size: 113KB - Virtual size: 113KB

.rdata
Size: 52KB - Virtual size: 51KB

.data
Size: 10KB - Virtual size: 13KB