SecuriteInfo[.]com[.]Win32[.]BotX-gen[.]2296[.]21970[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Win32.BotX-gen.2296.21970.exe
Size 272KB
Sample230916-ll2pfscd83
SHA256 0ffab407dd3ebd93f007e24f439bbda8c8b68d50b5ba6537213608608c6f8d61
MD5 a2b789e166d74ec2865e7a1c70233ef3
SHA1 d2c57c662861fb847c08045044b30473e7d0f334
SHA512 b721b0aa220f9d85bb9ed7dc122a3e8c38a1c0e40ae8fc3a8dcc3534893ee03947777609a4e9cafff18998b79fb89916bf2a624f47749c41b40061a5ff370183
SSDEEP 3072:bPNnEMUvutnGAL60p4XKJBjL0GIMzEGjw2hqNJ:bNAvutnGAL60WXuB/uepg
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.BotX-gen.2296.21970.exe

File Explorer

SecuriteInfo.com.Win32.BotX-gen.2296.21970.exe

.exe 272KB

SecuriteInfo.com.Win32.BotX-gen.2296.21970.exe

IMPHASH a9bf299729b09a43be583e7770d2853b
SHA256 0ffab407dd3ebd93f007e24f439bbda8c8b68d50b5ba6537213608608c6f8d61
MD5 a2b789e166d74ec2865e7a1c70233ef3
SHA1 d2c57c662861fb847c08045044b30473e7d0f334
SHA512 b721b0aa220f9d85bb9ed7dc122a3e8c38a1c0e40ae8fc3a8dcc3534893ee03947777609a4e9cafff18998b79fb89916bf2a624f47749c41b40061a5ff370183
SSDEEP 3072:bPNnEMUvutnGAL60p4XKJBjL0GIMzEGjw2hqNJ:bNAvutnGAL60WXuB/uepg
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

23609

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExA SystemTimeToTzSpecificLocalTime InterlockedDecrement SetDefaultCommConfigW GetEnvironmentStringsW SetConsoleScreenBufferSize SetVolumeMountPointW BackupSeek GetModuleHandleW GetNumberFormatA SetFileTime GetConsoleAliasExesW GetCommandLineA GetDriveTypeA GetEnvironmentStrings GetPrivateProfileIntA LoadLibraryW TerminateThread CopyFileW SetConsoleCP GetVolumePathNameA GetStartupInfoW CreateJobObjectA OpenMutexW GetHandleInformation GetLastError GetCurrentDirectoryW GetNumaProcessorNode EnumSystemCodePagesW LoadLibraryA GetProcessId LocalAlloc GetFileType RemoveDirectoryW GetProfileStringA FindNextChangeNotification FindAtomA GlobalWire EnumDateFormatsA GetModuleHandleA FreeEnvironmentStringsW FindNextFileW VirtualProtect GetCurrentDirectoryA EnumDateFormatsW FatalAppExitA GetShortPathNameW OpenSemaphoreW FindAtomW GetWindowsDirectoryW FindFirstVolumeW AddConsoleAliasA CreateFileW GetConsoleAliasesLengthW FindFirstFileW GetComputerNameA EnumResourceNamesW SetLastError GetCommandLineW CloseHandle ReadFile FlushFileBuffers GetStringTypeW HeapFree HeapAlloc GetProcAddress ExitProcess DecodePointer DeleteFileA EncodePointer HeapReAlloc HeapSetInformation RaiseException UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess IsProcessorFeaturePresent HeapCreate WriteFile GetStdHandle GetModuleFileNameW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId Sleep HeapSize SetHandleCount QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind MultiByteToWideChar SetStdHandle WriteConsoleW LCMapStringW

user32

GetListBoxInfo CharUpperW

gdi32

SelectPalette GetTextFaceW GetCharWidthW

advapi32

LookupAccountSidW

shell32

DragFinish

ole32

CoGetInstanceFromFile

winhttp

WinHttpWriteData