SecuriteInfo[.]com[.]Win32[.]BotX-gen[.]2760[.]31706[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Win32.BotX-gen.2760.31706.exe
Size 342KB
Sample230916-c21mnabb87
SHA256 96aee723f4e99b71d216411e44fa8f10a9ce7a01df947cc0c41aa8856076fa1e
MD5 382c67e9b4bedb4007e0445192e3ee71
SHA1 549e6d43f325efca5b5e6d9c77d1b9f571a4fadb
SHA512 ad12b8b97f470ca422096f097ae081ab07ddfb46421a38c38efc6beaa9df5cd1a578a85c2d5d5f77079e427930fdc1c3b07ba9454dd47a9263c95f49a789b274
SSDEEP 6144:gYbvk62Lsxd55lHaLoFGVs8aJAyizYU7NK/amcIk:gw/2OKTS8NyQ+T
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.BotX-gen.2760.31706.exe

File Explorer

SecuriteInfo.com.Win32.BotX-gen.2760.31706.exe

.exe 342KB

SecuriteInfo.com.Win32.BotX-gen.2760.31706.exe

IMPHASH a9bf299729b09a43be583e7770d2853b
SHA256 96aee723f4e99b71d216411e44fa8f10a9ce7a01df947cc0c41aa8856076fa1e
MD5 382c67e9b4bedb4007e0445192e3ee71
SHA1 549e6d43f325efca5b5e6d9c77d1b9f571a4fadb
SHA512 ad12b8b97f470ca422096f097ae081ab07ddfb46421a38c38efc6beaa9df5cd1a578a85c2d5d5f77079e427930fdc1c3b07ba9454dd47a9263c95f49a789b274
SSDEEP 6144:gYbvk62Lsxd55lHaLoFGVs8aJAyizYU7NK/amcIk:gw/2OKTS8NyQ+T
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

23609

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExA SystemTimeToTzSpecificLocalTime InterlockedDecrement SetDefaultCommConfigW GetEnvironmentStringsW SetConsoleScreenBufferSize SetVolumeMountPointW BackupSeek GetModuleHandleW GetNumberFormatA SetFileTime GetConsoleAliasExesW GetCommandLineA GetDriveTypeA GetEnvironmentStrings GetPrivateProfileIntA LoadLibraryW TerminateThread CopyFileW SetConsoleCP GetVolumePathNameA GetStartupInfoW CreateJobObjectA OpenMutexW GetHandleInformation GetLastError GetCurrentDirectoryW GetNumaProcessorNode EnumSystemCodePagesW LoadLibraryA GetProcessId LocalAlloc GetFileType RemoveDirectoryW GetProfileStringA FindNextChangeNotification FindAtomA GlobalWire EnumDateFormatsA GetModuleHandleA FreeEnvironmentStringsW FindNextFileW VirtualProtect GetCurrentDirectoryA EnumDateFormatsW FatalAppExitA GetShortPathNameW OpenSemaphoreW FindAtomW GetWindowsDirectoryW FindFirstVolumeW AddConsoleAliasA CreateFileW GetConsoleAliasesLengthW FindFirstFileW GetComputerNameA EnumResourceNamesW SetLastError GetCommandLineW CloseHandle ReadFile FlushFileBuffers GetStringTypeW HeapFree HeapAlloc GetProcAddress ExitProcess DecodePointer DeleteFileA EncodePointer HeapReAlloc HeapSetInformation RaiseException UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess IsProcessorFeaturePresent HeapCreate WriteFile GetStdHandle GetModuleFileNameW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId Sleep HeapSize SetHandleCount QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind MultiByteToWideChar SetStdHandle WriteConsoleW LCMapStringW

user32

GetListBoxInfo CharUpperW

gdi32

SelectPalette GetTextFaceW GetCharWidthW

advapi32

LookupAccountSidW

shell32

DragFinish

ole32

CoGetInstanceFromFile

winhttp

WinHttpWriteData