SecuriteInfo[.]com[.]Win32[.]TrojanX-gen[.]16867[.]135[.]exe

General

Target
SecuriteInfo.com.Win32.TrojanX-gen.16867.135.exe
Size 473KB
Sample230923-2fx23sag21
SHA256 a7dbe6bbc3e54f311a6aff5abe94c1659cbbb4b18b6388530d3a5090ad92b49c
MD5 5cb54e39039facb649c6f68d594987b2
SHA1 20fec21cb1795128b5be3ed0125d9ab19ea84151
SHA512 a94c256be302ab88607ff2be945c7ddd3f82ce4f5dd4966f1ad58cda7d4e08e08f35d5dc27c427c608320b38313da4f3007b9bfc482bd3ee2c3ef324e9961393
SSDEEP 12288:oPTKnFq7CFIKR0apIjbNhTWb9YRonkDgfGKoN5D2sQheP1T:1nGEIYqjRV6MokCOx2b4T
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.TrojanX-gen.16867.135.exe

File Explorer

SecuriteInfo.com.Win32.TrojanX-gen.16867.135.exe

.exe 473KB

SecuriteInfo.com.Win32.TrojanX-gen.16867.135.exe

IMPHASH 57ce57de917f3e031234cb31d98a05e5
SHA256 a7dbe6bbc3e54f311a6aff5abe94c1659cbbb4b18b6388530d3a5090ad92b49c
MD5 5cb54e39039facb649c6f68d594987b2
SHA1 20fec21cb1795128b5be3ed0125d9ab19ea84151
SHA512 a94c256be302ab88607ff2be945c7ddd3f82ce4f5dd4966f1ad58cda7d4e08e08f35d5dc27c427c608320b38313da4f3007b9bfc482bd3ee2c3ef324e9961393
SSDEEP 12288:oPTKnFq7CFIKR0apIjbNhTWb9YRonkDgfGKoN5D2sQheP1T:1nGEIYqjRV6MokCOx2b4T
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

21824

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetDriveTypeW FindResourceW DeleteVolumeMountPointA EnumCalendarInfoW ReadConsoleA GetCurrentProcess SetDefaultCommConfigW CreateJobObjectW GetEnvironmentStringsW GetComputerNameW SetCommBreak GetSystemDefaultLCID FreeEnvironmentStringsA GetConsoleAliasesA ReadConsoleW GetWindowsDirectoryA EnumTimeFormatsW GetCommandLineA TzSpecificLocalTimeToSystemTime GetEnvironmentStrings GetConsoleCP GlobalAlloc LoadLibraryW SetCommConfig GetLocaleInfoW IsBadCodePtr DeleteVolumeMountPointW TransactNamedPipe EnumSystemCodePagesA GetTimeFormatW LocalReAlloc HeapQueryInformation GetConsoleAliasExesA GetStartupInfoW DisconnectNamedPipe GetNamedPipeHandleStateW SetCurrentDirectoryA GetLastError GetCurrentDirectoryW ChangeTimerQueueTimer SetLastError LocalAlloc GetFileType MoveFileA RemoveDirectoryW SetFileApisToANSI FindNextFileA GetModuleHandleA SetLocaleInfoW FatalExit RequestDeviceWakeup CreateMailslotA GetStringTypeW VirtualProtect GetCurrentDirectoryA QueryPerformanceFrequency PeekConsoleInputA GetShortPathNameW FindFirstVolumeA TerminateJobObject FindAtomW AddConsoleAliasA OpenFileMappingA EnumSystemLocalesW GetConsoleAliasesLengthW WriteConsoleInputW GetCompressedFileSizeA GetTempFileNameW DeleteFileA HeapReAlloc GetProcAddress GetModuleHandleW ExitProcess DecodePointer GetCommandLineW HeapSetInformation RaiseException UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess HeapAlloc HeapFree IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount DeleteCriticalSection HeapCreate TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement WriteFile GetModuleFileNameW FreeEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep SetStdHandle WideCharToMultiByte GetConsoleMode FlushFileBuffers RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar HeapSize WriteConsoleW LCMapStringW ReadFile CloseHandle CreateFileW

user32

CharUpperW

gdi32

GetTextFaceA GetCharWidthA SetBkColor

Sharing