SecuriteInfo[.]com[.]Win32[.]PWSX-gen[.]32353[.]16014[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Win32.PWSX-gen.32353.16014.exe
Size 301KB
Sample230913-rwvxjsfc45
SHA256 fefa50ffd7c9e19b4c4d84e664b894c6377196942024b71ee371c466d194ee9c
MD5 92655ee9fd597b85b09a085a2c21fbe1
SHA1 f60f980e9a5c315722b3953638f9f5da85ed4a7e
SHA512 b01ccaf9c11c7ed1d3e2765c2f5590e53ba3ddac41a651298bf92028dccc0120431b91fc430b1cb587b3014f17e386605eba27559aa425e6f8beb7da23dc165c
SSDEEP 3072:WGFC2nPsomShMORKs+l5DRWcOQCFOTcCshoPvsAN5N0NUO8J:jF0omShrRTcDRBOLOTcA/Ub
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.PWSX-gen.32353.16014.exe

File Explorer

SecuriteInfo.com.Win32.PWSX-gen.32353.16014.exe

.exe 301KB

SecuriteInfo.com.Win32.PWSX-gen.32353.16014.exe

IMPHASH 04c2204ccf7af76dc6a24e22c76c351e
SHA256 fefa50ffd7c9e19b4c4d84e664b894c6377196942024b71ee371c466d194ee9c
MD5 92655ee9fd597b85b09a085a2c21fbe1
SHA1 f60f980e9a5c315722b3953638f9f5da85ed4a7e
SHA512 b01ccaf9c11c7ed1d3e2765c2f5590e53ba3ddac41a651298bf92028dccc0120431b91fc430b1cb587b3014f17e386605eba27559aa425e6f8beb7da23dc165c
SSDEEP 3072:WGFC2nPsomShMORKs+l5DRWcOQCFOTcCshoPvsAN5N0NUO8J:jF0omShrRTcDRBOLOTcA/Ub
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

28204

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoA GetConsoleAliasesLengthW GetNumaProcessorNode GetDriveTypeW BuildCommDCBAndTimeoutsA SystemTimeToTzSpecificLocalTime InterlockedIncrement MoveFileExW InterlockedDecrement CreateJobObjectW SetHandleInformation GetProfileStringW AddConsoleAliasW SetVolumeMountPointW FreeEnvironmentStringsA GetModuleHandleW GenerateConsoleCtrlEvent GetConsoleAliasExesW EnumTimeFormatsA EnumTimeFormatsW GetEnvironmentStrings GetConsoleCP LoadLibraryW TerminateThread FatalAppExitW GetStartupInfoW CreateMailslotW RaiseException GetPrivateProfileIntW InterlockedExchange SetLocaleInfoA SetThreadLocale GetLastError GetCurrentDirectoryW BackupRead MoveFileW RemoveDirectoryA EnumSystemCodePagesW LoadLibraryA OpenMutexA GetProcessId LocalAlloc GetNumberFormatW GlobalGetAtomNameW EnumDateFormatsA GlobalUnWire GetModuleHandleA EnumResourceNamesA FindNextFileW VirtualProtect EnumDateFormatsW PeekConsoleInputA GetShortPathNameW OpenSemaphoreW FindAtomW FindFirstVolumeW GetVolumeNameForVolumeMountPointW DeleteFileW CreateFileW ReadFile FlushFileBuffers FindFirstFileW SetDefaultCommConfigA GetCommandLineW GetFileSize GetComputerNameA GetStartupInfoA WriteConsoleW SetStdHandle Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer HeapFree HeapAlloc GetProcAddress ExitProcess DeleteFileA HeapSetInformation RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess IsProcessorFeaturePresent HeapCreate WriteFile GetStdHandle GetModuleFileNameW InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage GetStringTypeW MultiByteToWideChar SetFilePointer WideCharToMultiByte GetConsoleMode HeapReAlloc LCMapStringW CloseHandle

user32

GetComboBoxInfo CharUpperW

gdi32

SelectPalette GetTextFaceW GetBoundsRect

advapi32

LookupAccountSidW

shell32

DragFinish