SecuriteInfo[.]com[.]Win32[.]PWSX-gen[.]21483[.]9416

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.PWSX-gen.21483.9416
Size

83KB
MD5

cbe409693e5f5bf1486d814dd70b60ac
SHA1

51126aa206feb48a0b3a33430c5534eeb7f3a529
SHA256

050fa5410bd0988fd8b99ce12417b5f8d2b58796a11d56882e5adbfd62902dc9
SHA512

0e4112f5edc8b49938c33cc3f28bb220c751a1ad122c38bb3fd9c0c6a6fc99505fd18e796512b52a4b2e13ac3f4ad0504b6d37dc28eecd80132b5f27d7607fbf
SSDEEP

1536:SkZllX4P3qFTKPPavuTEP3RVnebuVH5sWzcdkFFjTtBpmgtcu:S0oP3uTKPWuTEP3YW2krv/ogtcu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.PWSX-gen.21483.9416

Files

SecuriteInfo.com.Win32.PWSX-gen.21483.9416
.dll windows x86

d8c268b35825adf780974f5fe02ef180

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

imm32

ImmConfigureIMEA
ImmGetRegisterWordStyleA
ImmUnlockIMC
ImmGetCandidateListCountW

kernel32

CreateFileW
SetFilePointerEx
WriteConsoleW
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
SetStdHandle
HeapReAlloc
HeapSize
GetStringTypeW
K32GetProcessMemoryInfo
EnumSystemCodePagesW
VirtualProtect
GetCurrentProcess
Sleep
GetDiskFreeSpaceExW
CloseHandle
GetFileType
GetStdHandle
GetProcessHeap
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapFree
HeapAlloc
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
TerminateProcess
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
DecodePointer

wininet

CreateUrlCacheContainerW
InternetQueryDataAvailable
ShowX509EncodedCertificate

ws2_32

WSAIsBlocking
WSARemoveServiceClass
WSACleanup
WSAAsyncGetHostByAddr
WSAGetQOSByName
shutdown

resutils

ResUtilSetPrivatePropertyList
ResUtilVerifyService
ResUtilVerifyResourceService
ResUtilFreeParameterBlock

gdi32

SetBoundsRect
AnimatePalette
GdiGetPageCount
RemoveFontMemResourceEx
EnumFontsW
SetWindowExtEx
Pie

rtutils

TracePrintfExA
TraceVprintfExW
MprSetupProtocolFree

user32

RealGetWindowClassW
GetDlgItemTextW
SetClassLongW
GetPriorityClipboardFormat
DlgDirSelectComboBoxExW
DestroyWindow

winspool.drv

FindNextPrinterChangeNotification
DevQueryPrint
ord208
ord202
AddFormA
WaitForPrinterChange

rtm

MgmGetFirstMfe
MgmTakeInterfaceOwnership
RtmGetNetworkCount

pdh

PdhCloseQuery
PdhOpenQueryW
PdhAddCounterW
PdhCollectQueryData
PdhGetFormattedCounterValue

Exports

Exports

JKbtgdfd
_GetCPUUsage@0
_GetDiskIOUsage@0
_GetDiskUsage@0
_GetMemoryUsage@0
_GetNetworkUsage@0

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d8c268b35825adf780974f5fe02ef180

Headers

DLL Characteristics

File Characteristics

Imports

imm32

kernel32

wininet

ws2_32

resutils

gdi32

rtutils

user32

winspool.drv

rtm

pdh

Exports

Exports

Sections

.text Size: 45KB - Virtual size: 45KB

.rdata Size: 24KB - Virtual size: 23KB

.data Size: 8KB - Virtual size: 10KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 45KB - Virtual size: 45KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 8KB - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 4KB - Virtual size: 3KB