SecuriteInfo[.]com[.]Win32[.]TrojanX-gen[.]9730[.]25334[.]exe

General

Target
SecuriteInfo.com.Win32.TrojanX-gen.9730.25334.exe
Size 515KB
Sample230921-mpymmsfe4x
SHA256 77460056386f07d96908455241b15091c3edecd9fd55fbf6ce7f3a061c7ac5cd
MD5 2e1c943c88f814fa57a7eee2e1999bfe
SHA1 b90ea79c8277d228edf6b8517c8f61d69665194d
SHA512 19f05a1e1aa6b0b2b864f925271a080dd6017393511c333b7337005ee9abf54c620a9dd866e01ff34370de1e8f46d513d7d4312e2a94880861b1c84d748b0acd
SSDEEP 12288:JVKMuC/hbFEbF2Cg2M1pw8iDQPTeBIYc7s52/J8:JHuQ+bFlJM/UDQL2vU/J8
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.TrojanX-gen.9730.25334.exe

File Explorer

SecuriteInfo.com.Win32.TrojanX-gen.9730.25334.exe

.exe 515KB

SecuriteInfo.com.Win32.TrojanX-gen.9730.25334.exe

IMPHASH c9ac49ec96641fb6cdc3cb11e7142d72
SHA256 77460056386f07d96908455241b15091c3edecd9fd55fbf6ce7f3a061c7ac5cd
MD5 2e1c943c88f814fa57a7eee2e1999bfe
SHA1 b90ea79c8277d228edf6b8517c8f61d69665194d
SHA512 19f05a1e1aa6b0b2b864f925271a080dd6017393511c333b7337005ee9abf54c620a9dd866e01ff34370de1e8f46d513d7d4312e2a94880861b1c84d748b0acd
SSDEEP 12288:JVKMuC/hbFEbF2Cg2M1pw8iDQPTeBIYc7s52/J8:JHuQ+bFlJM/UDQL2vU/J8
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

20795

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindFirstFileW EnumCalendarInfoA GetDriveTypeW FindResourceW MoveFileExW SetDefaultCommConfigW CreateJobObjectW GetNamedPipeHandleStateA SetConsoleScreenBufferSize WriteConsoleInputA GetTimeFormatA GetSystemDefaultLCID GetModuleHandleW GetConsoleAliasesLengthA ReadConsoleW GetConsoleAliasExesW GetCommandLineA GetEnvironmentStrings GetConsoleCP GlobalAlloc GetPrivateProfileIntA LoadLibraryW SetCommConfig TerminateThread GetLocaleInfoW DeleteVolumeMountPointW TransactNamedPipe LocalReAlloc GetStartupInfoW CreateMailslotW DisconnectNamedPipe GetShortPathNameA SetCurrentDirectoryA FindFirstFileA SetProcessAffinityMask ChangeTimerQueueTimer SetLastError GetThreadLocale MoveFileW CopyFileA EnumSystemCodePagesW GetProcessVersion LoadLibraryA RemoveDirectoryW FindAtomA GetOEMCP FindNextFileA GetModuleHandleA SetLocaleInfoW CreateMutexA GetProcessAffinityMask FreeEnvironmentStringsW FindNextFileW VirtualProtect PurgeComm GetCurrentDirectoryA EnumDateFormatsW FatalAppExitA GetShortPathNameW TerminateJobObject FindAtomW GetWindowsDirectoryW FindFirstVolumeW GetFileInformationByHandle AddConsoleAliasA DebugBreak OpenFileMappingA EnumSystemLocalesW CreateFileW CloseHandle GetComputerNameA GetCommandLineW GetLastError GetVolumeNameForVolumeMountPointA MoveFileA HeapAlloc DeleteFileA EncodePointer DecodePointer HeapReAlloc HeapSetInformation GetProcAddress ExitProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess WriteFile GetStdHandle GetModuleFileNameW HeapCreate EnterCriticalSection LeaveCriticalSection Sleep HeapSize HeapFree SetFilePointer GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind GetCPInfo GetACP IsValidCodePage MultiByteToWideChar WideCharToMultiByte SetStdHandle GetConsoleMode FlushFileBuffers IsProcessorFeaturePresent LCMapStringW GetStringTypeW ReadFile WriteConsoleW RaiseException

user32

CharUpperA

gdi32

GetBoundsRect GetTextFaceW SetBkColor

Sharing