SecuriteInfo[.]com[.]Trojan[.]Win32[.]Hesv[.]dsrc[.]26548[.]27472

Sharing

Copy URL

Twitter E-mail

General

Target

SecuriteInfo.com.Trojan.Win32.Hesv.dsrc.26548.27472
Size

1.0MB
MD5

f1003eb385a596a1ed3aeb245e73b98b
SHA1

67433bfb5cedb7581fc7a48b601ee63f3ec4b9af
SHA256

aa2f6511463335040b212257b323d583a3c0fe8fdc5453ba186b38f960083704
SHA512

4035a9a0798ecbec1656b5b611fd05cafe5f0c6506ea88b0478578d825ccefb34af1441f384a3f6afd8a3265dd6e419d6dfb7627dbbd6807be1e6431193245d2
SSDEEP

24576:HEwqCJDx5+jLiDaq7/1E7/MReEdaRLgS:HEC9x5+jLGaI18/MndaRLgS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.Win32.Hesv.dsrc.26548.27472

Files

SecuriteInfo.com.Trojan.Win32.Hesv.dsrc.26548.27472
.exe windows:5 windows x86

4a0083f38776eed805b63c1b2adec4d1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
InterlockedExchange
InitializeCriticalSectionAndSpinCount
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
ExitProcess
GetModuleHandleA
GetModuleFileNameA
HeapCreate
HeapSize
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetStartupInfoW
VirtualQuery
GetSystemInfo
VirtualProtect
GetSystemTimeAsFileTime
HeapReAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
CreateThread
ExitThread
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
ResumeThread
GetThreadContext
SetThreadContext
SuspendThread
GetVersionExA
GetFullPathNameW
GetWindowsDirectoryW
lstrcpyW
lstrcatW
lstrcpynW
WideCharToMultiByte
GetFileSizeEx
ReadFile
WriteFile
GetCurrentThread
CreateFileW
WinExec
CreateProcessW
InitializeCriticalSection
SetEvent
GlobalHandle
GlobalFree
lstrcmpW
GetProcAddress
GetVersionExW
SetLastError
GetTimeFormatW
GetDateFormatW
FlushInstructionCache
GetLocaleInfoW
MulDiv
GetTickCount
EnterCriticalSection
LeaveCriticalSection
WaitForSingleObject
CreateEventW
DeleteCriticalSection
GetCurrentThreadId
LoadLibraryW
LockResource
GlobalAlloc
GlobalLock
GlobalUnlock
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
FreeLibrary
GetModuleHandleW
GetCommandLineW
lstrcmpiW
Sleep
MultiByteToWideChar
RaiseException
InterlockedDecrement
lstrlenW
GetModuleFileNameW
lstrlenA
OutputDebugStringW
DebugBreak
InterlockedIncrement
FormatMessageW
LocalFree
GetCurrentProcess
GetLastError
GetCurrentProcessId
OpenProcess
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
CloseHandle
GetStdHandle
DisableThreadLibraryCalls

user32

IntersectRect
InflateRect
DestroyAcceleratorTable
IsChild
GetClassNameW
GetDesktopWindow
CreateAcceleratorTableW
InvalidateRgn
GetActiveWindow
PostQuitMessage
GetDlgItemTextW
UnregisterClassA
EndDialog
GetParent
SetWindowPos
MapWindowPoints
GetClientRect
GetMonitorInfoW
MonitorFromWindow
IsDlgButtonChecked
GetWindowRect
GetWindow
LoadStringW
DrawTextW
SendMessageW
GetDlgItem
PostMessageW
ExitWindowsEx
CharLowerW
CharNextW
wvsprintfW
MessageBeep
DialogBoxParamW
SetRect
EnableWindow
DestroyIcon
GetIconInfo
WindowFromPoint
GetCursorPos
DrawStateW
IsWindowEnabled
DrawFocusRect
CreateIconIndirect
CopyIcon
SetRectEmpty
GetLastActivePopup
DialogBoxIndirectParamW
EnableMenuItem
GetSystemMenu
SetForegroundWindow
DrawEdge
GetWindowPlacement
IsIconic
DrawFrameControl
CreateDialogIndirectParamW
IsDialogMessageW
LoadIconW
LoadImageW
CheckDlgButton
SetDlgItemTextW
MoveWindow
MessageBoxW
EqualRect
PtInRect
IsRectEmpty
CopyRect
SetMenuDefaultItem
GetMenuItemInfoW
SetMenuItemInfoW
GetWindowDC
ReleaseDC
GetDC
EndPaint
BeginPaint
RegisterWindowMessageW
SystemParametersInfoA
ChildWindowFromPoint
GetMenuState
DefWindowProcW
ReleaseCapture
GetCapture
GetAsyncKeyState
GetMenuItemID
GetMenuItemRect
GetMenuItemCount
EnumWindows
GetWindowLongW
GetMessagePos
GetFocus
FrameRect
MapDialogRect
GetSysColorBrush
FillRect
SetCursor
OffsetRect
UpdateWindow
DispatchMessageW
TranslateMessage
GetMessageW
GetClassInfoExW
RegisterClassExW
CallWindowProcW
GetSystemMetrics
GetComboBoxInfo
SetTimer
SetScrollInfo
SetWindowRgn
GetSysColor
RegisterClipboardFormatW
SetWindowLongW
IsWindow
SetScrollPos
GetKeyState
GetScrollInfo
KillTimer
SetWindowContextHelpId
GetDlgCtrlID
GetScrollPos
SendDlgItemMessageW
SetFocus
SetCapture
RedrawWindow
IsWindowVisible
ShowWindow
InvalidateRect
ScreenToClient
ClientToScreen
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
LoadCursorW
SystemParametersInfoW
CreateWindowExW
DestroyCursor
PostThreadMessageW
DestroyWindow
PeekMessageW

gdi32

LineTo
CreateDIBSection
StretchBlt
GetTextMetricsW
TextOutW
SetTextJustification
MoveToEx
FrameRgn
SelectClipRgn
GetDCOrgEx
FillRgn
OffsetRgn
CreateBitmap
PatBlt
CreatePatternBrush
CreatePen
CreateFontIndirectW
SetTextColor
GetDeviceCaps
CreateSolidBrush
CreateCompatibleBitmap
SetViewportOrgEx
SelectObject
CreateCompatibleDC
DeleteDC
BitBlt
GetObjectW
GetTextExtentPoint32W
CombineRgn
CreatePolygonRgn
CreateRectRgn
SaveDC
RestoreDC
GetStockObject
SetBkMode
OffsetWindowOrgEx
GetClipBox
RoundRect
ExtTextOutW
DeleteObject
CreateRoundRectRgn
SetBkColor
SetWindowOrgEx

comdlg32

GetOpenFileNameW

advapi32

RegQueryValueW
LookupPrivilegeValueW
OpenProcessToken
RegCreateKeyExW
RegOpenKeyW
RegCloseKey
RegQueryValueExW
RegSetValueExW
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyExW
RegEnumKeyExW
AdjustTokenPrivileges
RegQueryInfoKeyW

shell32

SHGetSpecialFolderPathW
ord155
SHOpenFolderAndSelectItems
SHParseDisplayName
ShellExecuteW

ole32

CLSIDFromString
CLSIDFromProgID
OleLockRunning
OleInitialize
OleUninitialize
ReleaseStgMedium
OleDuplicateData
DoDragDrop
RegisterDragDrop
RevokeDragDrop
CoCreateInstance
StringFromGUID2
CoRevokeClassObject
CoRegisterClassObject
CreateStreamOnHGlobal
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoInitialize
CoResumeClassObjects
CoUninitialize
CoGetClassObject

oleaut32

VarUI4FromStr
SysFreeString
OleCreateFontIndirect
UnRegisterTypeLi
RegisterTypeLi
SysAllocString
LoadTypeLi
LoadRegTypeLi
SysStringLen
SysAllocStringLen
VariantClear
VariantInit
DispCallFunc

liveupdate

?DownloadUpdates@CLiveUpdate@@QAEHPB_WH@Z
?GetUpdatesInfo@CLiveUpdate@@QAEXPA_WAAH@Z
?IsNewVersionAvailable@CLiveUpdate@@QAEHPB_W@Z
?SetNotifyWindow@CLiveUpdate@@QAEXPAUHWND__@@@Z
?SetProduct@CLiveUpdate@@QAEXU_GUID@@@Z
??0CLiveUpdate@@QAE@XZ
??1CLiveUpdate@@QAE@XZ

shlwapi

StrCatW
StrStrIW
StrCpyW
StrStrW
StrCmpIW
PathIsURLW
PathStripPathW
PathRemoveFileSpecW

comctl32

_TrackMouseEvent
InitCommonControlsEx
ImageList_GetIconSize
ImageList_LoadImageW
ImageList_DrawEx
CreateStatusWindowW
ImageList_Create
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_GetImageCount
ord17
ImageList_AddMasked

msimg32

AlphaBlend
GradientFill

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

psapi

EnumProcessModules
GetModuleBaseNameW

quartz

AMGetErrorTextW

uxtheme

CloseThemeData
DrawThemeBackground
OpenThemeData

wininet

HttpOpenRequestA
HttpOpenRequestW
InternetConnectA
InternetConnectW
InternetReadFile

Sections

.text
Size: 545KB - Virtual size: 544KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 422KB - Virtual size: 421KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4a0083f38776eed805b63c1b2adec4d1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

liveupdate

shlwapi

comctl32

msimg32

version

psapi

quartz

uxtheme

wininet

Sections

.text Size: 545KB - Virtual size: 544KB

.rdata Size: 67KB - Virtual size: 67KB

.data Size: 14KB - Virtual size: 62KB

.rsrc Size: 422KB - Virtual size: 421KB

.reloc Size: 23KB - Virtual size: 23KB

.text
Size: 545KB - Virtual size: 544KB

.rdata
Size: 67KB - Virtual size: 67KB

.data
Size: 14KB - Virtual size: 62KB

.rsrc
Size: 422KB - Virtual size: 421KB

.reloc
Size: 23KB - Virtual size: 23KB