SecuriteInfo[.]com[.]Win32[.]PWSX-gen[.]29818[.]21831[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

SecuriteInfo.com.Win32.PWSX-gen.29818.21831.exe
Size

196KB
MD5

a1d8fdca35d16eeb222ddd68e98a08bf
SHA1

d1363f3cf1627312e8fc9b51a541564c660daab9
SHA256

088fd63cdce0930d784105665f0b20b809b18900cb42116159a01c7b204543fa
SHA512

107a8c21530cebd3889d41cb7a8763fde1f04173e9c6e41c46fae4549ab17a4b5c841d76d2edb6dd6cb03fc4bde87ae9524156cffc11429603cbe3b79ecdc93d
SSDEEP

3072:7Dvy7RyOjFD4ANT32x8T9mNJMfHp4ooblYitaknK8pUdVAg0FujCoF01s8mEbM:7DvAUMP9Gx8JYEHBUlftv4AORF0WpeM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.PWSX-gen.29818.21831.exe

Files

SecuriteInfo.com.Win32.PWSX-gen.29818.21831.exe
.exe windows x86

d61e85f70a169a987123cc8b7001f4d2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapSize
HeapReAlloc
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
ReadFile
GetConsoleMode
GetConsoleCP
FlushFileBuffers
CloseHandle
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
GetLocaleInfoW
LCMapStringW
HeapAlloc
HeapFree
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
WriteFile
GetStdHandle
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
GetLastError
RtlUnwind
RaiseException
TerminateProcess
GetCurrentProcess
GetModuleHandleW
GetStartupInfoW
SetUnhandledExceptionFilter
CreateFileW
EnumTimeFormatsW
IsValidLocale
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
WideCharToMultiByte
LCMapStringEx
GetStringTypeW
GetCPInfo
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
WriteConsoleW

crypt32

CryptEncodeObject
CertDuplicateCertificateContext

rtutils

TracePrintfW
TracePutsExW
MprSetupProtocolEnum
TracePrintfExA
RouterLogEventDataW
TraceDeregisterExA
RouterLogEventA
TraceDeregisterA

mpr

WNetAddConnection2A
WNetOpenEnumW
WNetDisconnectDialog1W
WNetEnumResourceA
MultinetGetConnectionPerformanceW
WNetCancelConnectionA
WNetGetNetworkInformationW

odbc32

VFreeErrors
ord173
ord2
ord51
ord33
ord267
ord206

rtm

RtmDeleteRouteTable
MgmReleaseInterfaceOwnership
RtmDeleteRoute
MgmTakeInterfaceOwnership
RtmGetNextRoute
MgmGetFirstMfe
RtmGetNetworkCount
MgmInitialize

ws2_32

WSALookupServiceBeginA
connect
sendto
WSACancelBlockingCall
WEP
WSAEnumProtocolsW
WSAEnumNameSpaceProvidersW
WSAHtons
WSASetBlockingHook

mscms

SelectCMM
ord1
CreateProfileFromLogColorSpaceW
DisassociateColorProfileFromDeviceW
SetColorProfileElementReference
SetColorProfileHeader
EnumColorProfilesW
OpenColorProfileW
CheckBitmapBits
InstallColorProfileA
SetColorProfileElement

mswsock

GetAcceptExSockaddrs
rresvport
rcmd
GetTypeByNameA
GetAddressByNameW

advapi32

CryptReleaseContext
CryptAcquireContextW
CryptGenRandom

Sections

.text
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d61e85f70a169a987123cc8b7001f4d2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

crypt32

rtutils

mpr

odbc32

rtm

ws2_32

mscms

mswsock

advapi32

Sections

.text Size: 121KB - Virtual size: 121KB

.rdata Size: 55KB - Virtual size: 54KB

.data Size: 11KB - Virtual size: 14KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 121KB - Virtual size: 121KB

.rdata
Size: 55KB - Virtual size: 54KB

.data
Size: 11KB - Virtual size: 14KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 7KB - Virtual size: 6KB