SecuriteInfo[.]com[.]Win32[.]Evo-gen[.]6656[.]15576[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Win32.Evo-gen.6656.15576.exe
Size 2.2MB
Sample230930-qrtcgseb35
SHA256 8d0191d24b9d62100603d7640fe138d5eb005f758fa77cbcf0434e317286db6c
MD5 779ff91d6893229708d97f21cb2c9e4d
SHA1 883889f130a26a11f02648849829d3ba0f208fb6
SHA512 a6d980415d7928934d83e6317e237f592c1aa605d2cbf40993ee56ff185a222019ad63bace07b728869eb8094aed34e9c078dc63ca16055c7a3a2b46cb935fe5
SSDEEP 49152:ufBudeLGQtMYIcoU9qia+cKu2RiviribhMTQvRkVejWEGEBG:reLfMiNc+uiubhKf7SG
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.Evo-gen.6656.15576.exe

File Explorer

SecuriteInfo.com.Win32.Evo-gen.6656.15576.exe

.exe 2.2MB

SecuriteInfo.com.Win32.Evo-gen.6656.15576.exe

IMPHASH 4ba3ea0d6362a841ec66a1fc0a1b874f
SHA256 8d0191d24b9d62100603d7640fe138d5eb005f758fa77cbcf0434e317286db6c
MD5 779ff91d6893229708d97f21cb2c9e4d
SHA1 883889f130a26a11f02648849829d3ba0f208fb6
SHA512 a6d980415d7928934d83e6317e237f592c1aa605d2cbf40993ee56ff185a222019ad63bace07b728869eb8094aed34e9c078dc63ca16055c7a3a2b46cb935fe5
SSDEEP 49152:ufBudeLGQtMYIcoU9qia+cKu2RiviribhMTQvRkVejWEGEBG:reLfMiNc+uiubhKf7SG
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

105324

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

oleaut32

SysAllocStringLen VariantClear SysStringLen

user32

DialogBoxParamW SetWindowLongW GetWindowLongW GetDlgItem SetTimer LoadStringW CharUpperW DestroyWindow EndDialog PostMessageW SetWindowTextW ShowWindow MessageBoxW SendMessageW LoadIconW KillTimer

shell32

ShellExecuteExW

msvcrt

_controlfp __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit ?terminate@@YAXXZ ??1type_info@@UAE@XZ _except_handler3 _beginthreadex memset wcsstr free malloc memcpy _CxxThrowException _purecall memmove memcmp wcscmp __CxxFrameHandler

kernel32

GetStartupInfoA InitializeCriticalSection ReleaseSemaphore CreateSemaphoreW ResetEvent SetEvent CreateEventW GetVersion VirtualFree VirtualAlloc Sleep GetStdHandle GlobalMemoryStatus GetSystemInfo GetCurrentProcess GetProcessAffinityMask SetEndOfFile WriteFile ReadFile SetFilePointer GetFileSize GetFileInformationByHandle GetFileAttributesW GetModuleHandleA FindNextFileW FindFirstFileW FindClose GetCurrentThreadId GetTickCount GetCurrentProcessId GetCurrentDirectoryW SetCurrentDirectoryW SetLastError DeleteFileW CreateDirectoryW GetModuleHandleW GetProcAddress RemoveDirectoryW SetFileAttributesW CreateFileW SetFileTime GetSystemDirectoryW GetTempPathW FormatMessageW LocalFree GetModuleFileNameW LoadLibraryExW DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError GetVersionExW GetCommandLineW CreateProcessW CloseHandle WaitForSingleObject