SecuriteInfo[.]com[.]Win32[.]AdwareX-gen[.]15544[.]15957[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Win32.AdwareX-gen.15544.15957.exe
Size 171KB
Sample231004-d3l2bsgh2v
SHA256 853d6a20b81a88dcd326ef889645896a3e779b07676e319fd4aceedfe01aa891
MD5 e37fff76c8a5f2253bb2b7333fa2a461
SHA1 8fe71f78fe14b4e4c6f8717b29af653bf695c397
SHA512 29c317fecdcd23049c191347151869e90fe3ba9b0dff756fae59ffda45ae00b150d93987cd8f630ce8f095af19dd9575fb4a6eea049e9f4a6f08664c43625d61
SSDEEP 3072:m65DQalaUD8EeGZ+7zZbr3zUJhSwL+Z3H:/JDbZCxIi
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.AdwareX-gen.15544.15957.exe

File Explorer

SecuriteInfo.com.Win32.AdwareX-gen.15544.15957.exe

.exe 171KB

SecuriteInfo.com.Win32.AdwareX-gen.15544.15957.exe

IMPHASH 809e622c7997f6907ac7c7decef79519
SHA256 853d6a20b81a88dcd326ef889645896a3e779b07676e319fd4aceedfe01aa891
MD5 e37fff76c8a5f2253bb2b7333fa2a461
SHA1 8fe71f78fe14b4e4c6f8717b29af653bf695c397
SHA512 29c317fecdcd23049c191347151869e90fe3ba9b0dff756fae59ffda45ae00b150d93987cd8f630ce8f095af19dd9575fb4a6eea049e9f4a6f08664c43625d61
SSDEEP 3072:m65DQalaUD8EeGZ+7zZbr3zUJhSwL+Z3H:/JDbZCxIi
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

33945

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

imm32

ImmGetCompositionWindow ImmDisableIME ImmSetHotKey ImmGetDescriptionA ImmReSizeIMCC ImmLockIMC ImmGetConversionStatus ImmGetCompositionFontW

kernel32

OpenMutexA CompareFileTime GetModuleHandleA lstrcmp EnumTimeFormatsW CreateFileW ReadConsoleW WriteConsoleW SetStdHandle LoadLibraryW LoadLibraryExW ChangeTimerQueueTimer _lopen OutputDebugStringW MoveFileExA GetPriorityClass GetConsoleAliasesA WaitForDebugEvent CreateThread GetProcAddress SetFilePointerEx ReadFile GetConsoleMode GetConsoleCP FlushFileBuffers CloseHandle HeapReAlloc FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetFileType IsDebuggerPresent GetProcessHeap GetCurrentThreadId GetOEMCP GetACP IsValidCodePage HeapSize GetModuleHandleExW ExitProcess InterlockedIncrement InterlockedDecrement WideCharToMultiByte EnterCriticalSection LeaveCriticalSection DeleteCriticalSection Sleep EncodePointer DecodePointer MultiByteToWideChar GetStringTypeW GetLastError HeapFree RaiseException RtlUnwind GetCommandLineW InitializeCriticalSectionAndSpinCount GetCPInfo HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW IsProcessorFeaturePresent LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetStdHandle WriteFile GetModuleFileNameW

user32

SwapMouseButton GetDlgItemTextW ChangeDisplaySettingsW SystemParametersInfoA IsWindowUnicode SetCursorPos

avifil32

AVIFileInit AVIFileWriteData IID_IGetFrame EditStreamSetNameA AVIStreamOpenFromFileA AVIStreamInfo AVIFileEndRecord

msvfw32

ICSeqCompressFrameStart DrawDibChangePalette

mpr

WNetAddConnection3W WNetGetResourceParentA WNetDisconnectDialog WNetOpenEnumA WNetGetNetworkInformationA WNetGetProviderNameA WNetCancelConnectionA MultinetGetConnectionPerformanceW

winspool.drv

DeleteFormA EnumPrintProcessorDatatypesW EnumMonitorsA GetPrinterDataW EnumPrinterKeyA OpenPrinterW

wsock32

ord1102 WSAAsyncGetHostByAddr htons __WSAFDIsSet getsockopt WSAUnhookBlockingHook gethostname