SecuriteInfo[.]com[.]Win32[.]Evo-gen[.]14725[.]3648[.]exe

General

Target
SecuriteInfo.com.Win32.Evo-gen.14725.3648.exe
Size 472KB
Sample230924-at2tmsbb3s
SHA256 a33ec26c7f1dbc1b4bf33f9692fdb267faf8748a66de2cf5f3342575c29e7dee
MD5 a29c5ea5f009e37f2b567fdfcd6f04d4
SHA1 44eae13fe113f6f98f3b38f8d995c475c7af8d9a
SHA512 8e11005af0b9c3febe6bee7f77a5c3e3cba9ef5c3a681227ffe5f38d2739db6a500fb7acb6e08718601a6afad6d69f4fbfb18ef7f5b1a6429e193dd486cf2bfd
SSDEEP 6144:5g4KETQkSPqJwdeidzErR1zVqRS5BiycPms6KRlaUxHUpxP0SFp9bvgJsAZXZJoP:WMTLqqKmR1z8Siox6UZkpZLz+
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.Evo-gen.14725.3648.exe

File Explorer

SecuriteInfo.com.Win32.Evo-gen.14725.3648.exe

.exe 472KB

SecuriteInfo.com.Win32.Evo-gen.14725.3648.exe

IMPHASH 915313f9baf3d4fbe9e467fb8242a50c
SHA256 a33ec26c7f1dbc1b4bf33f9692fdb267faf8748a66de2cf5f3342575c29e7dee
MD5 a29c5ea5f009e37f2b567fdfcd6f04d4
SHA1 44eae13fe113f6f98f3b38f8d995c475c7af8d9a
SHA512 8e11005af0b9c3febe6bee7f77a5c3e3cba9ef5c3a681227ffe5f38d2739db6a500fb7acb6e08718601a6afad6d69f4fbfb18ef7f5b1a6429e193dd486cf2bfd
SSDEEP 6144:5g4KETQkSPqJwdeidzErR1zVqRS5BiycPms6KRlaUxHUpxP0SFp9bvgJsAZXZJoP:WMTLqqKmR1z8Siox6UZkpZLz+
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

21693

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindResourceW DeleteVolumeMountPointA EnumCalendarInfoW ReadConsoleA GetCurrentProcess CreateJobObjectW GetEnvironmentStringsW GetModuleHandleExW GetComputerNameW SetCommBreak GetSystemDefaultLCID FreeEnvironmentStringsA GetConsoleAliasesA ReadConsoleW GetWindowsDirectoryA EnumTimeFormatsW GetCommandLineA TzSpecificLocalTimeToSystemTime GetEnvironmentStrings GetConsoleCP GlobalAlloc LoadLibraryW SetCommConfig GetLocaleInfoW IsBadCodePtr DeleteVolumeMountPointW TransactNamedPipe EnumSystemCodePagesA GetTimeFormatW HeapQueryInformation GetCompressedFileSizeA GetDriveTypeW DisconnectNamedPipe GetNamedPipeHandleStateW SetCurrentDirectoryA GetLastError GetCurrentDirectoryW ChangeTimerQueueTimer SetLastError LocalAlloc GetFileType MoveFileA RemoveDirectoryW SetFileApisToANSI FindNextFileA GetModuleHandleA SetLocaleInfoW FatalExit RequestDeviceWakeup CreateMailslotA GetStringTypeW VirtualProtect GetCurrentDirectoryA QueryPerformanceFrequency PeekConsoleInputA GetShortPathNameW FindFirstVolumeA TerminateJobObject FindAtomW AddConsoleAliasA OpenFileMappingA EnumSystemLocalesW CreateFileW GetConsoleAliasExesA GetConsoleAliasesLengthW SetDefaultCommConfigA WriteConsoleInputW GetStartupInfoW GetTempFileNameW DeleteFileA HeapReAlloc GetProcAddress GetModuleHandleW ExitProcess DecodePointer GetCommandLineW HeapSetInformation RaiseException UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess HeapAlloc HeapFree IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection HeapCreate SetFilePointer InitializeCriticalSectionAndSpinCount DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW SetHandleCount QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar WideCharToMultiByte SetStdHandle GetConsoleMode FlushFileBuffers HeapSize LCMapStringW ReadFile WriteConsoleW CloseHandle

user32

CharUpperW

gdi32

GetTextFaceA GetCharWidthA SetBkColor

advapi32

ReadEventLogA

Sharing