SecuriteInfo[.]com[.]Win32[.]RansomX-gen[.]12267[.]11679

Sharing

Copy URL

Twitter E-mail

General

Target

SecuriteInfo.com.Win32.RansomX-gen.12267.11679
Size

167KB
MD5

9fad3cd00c8dee4bb877f0f1fbb8dc84
SHA1

3f35f0e293d43d23223d2bce976fb37df71cf83c
SHA256

70c0ef97db97e10004d5b57cb0a26f02aad81cf0bbef8e06f8557acabca625ea
SHA512

4b6eaa9d381be4f5b4ce21935b9e1256e6c166e42c80eb57b49632820b19a4bd1e6b28bd28eb7498ca186f26549694be36761764f7897a7f8a231344bf732ec2
SSDEEP

3072:v+8t+lqKrGGyzJAaMo+E4uRW+2qJavzvT3JHK:v+8wiGSPt4Dzrd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.RansomX-gen.12267.11679

Files

SecuriteInfo.com.Win32.RansomX-gen.12267.11679
.exe windows:6 windows x86

d42f205bb87da9f129870c596a747ae3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetStdHandle
WriteConsoleW
ReadConsoleW
LoadLibraryW
CreateFileW
LoadLibraryExW
OutputDebugStringW
EnumTimeFormatsW
GetProcAddress
GetModuleHandleA
SetFilePointerEx
ReadFile
GetConsoleMode
GetConsoleCP
FlushFileBuffers
CloseHandle
HeapReAlloc
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
IsDebuggerPresent
GetProcessHeap
GetCurrentThreadId
GetOEMCP
GetACP
IsValidCodePage
HeapSize
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
WriteFile
GetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
IsProcessorFeaturePresent
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
EncodePointer
DecodePointer
MultiByteToWideChar
GetStringTypeW
GetLastError
HeapFree
RaiseException
RtlUnwind
GetCommandLineW
InitializeCriticalSectionAndSpinCount
GetCPInfo
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW

mscms

GetPS2ColorRenderingIntent
GetPS2ColorSpaceArray
GetColorProfileHeader

gdi32

GetMetaFileW
AngleArc
EnumEnhMetaFile
GdiPlayDCScript
GetEnhMetaFilePixelFormat
MaskBlt
UpdateColors
GetNearestPaletteIndex

msvfw32

ICDecompress
DrawDibSetPalette
DrawDibClose
ICSendMessage
ICSeqCompressFrameStart

avicap32

capGetDriverDescriptionW

avifil32

AVIFileRelease
EditStreamCut
AVIStreamInfoW

rtm

RtmBlockDeleteRoutes
RtmGetRouteAge
MgmInitialize
MgmGetMfe
RtmDeleteRouteTable
RtmGetFirstRoute
RtmGetNetworkCount

mpr

WNetGetNetworkInformationA
WNetGetResourceInformationA
WNetGetProviderNameW
WNetConnectionDialog1A
WNetEnumResourceA
WNetGetLastErrorW

wininet

InternetCombineUrlA
FindFirstUrlCacheContainerW
InternetSetCookieA
LoadUrlCacheContent
FindFirstUrlCacheContainerA

mswsock

rexec
rcmd
sethostname
TransmitFile
EnumProtocolsA
GetServiceA

mapi32

ord203
ord128
ord50
ord154
ord124
ord136
ord187
ord80

Sections

.text
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d42f205bb87da9f129870c596a747ae3

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

mscms

gdi32

msvfw32

avicap32

avifil32

rtm

mpr

wininet

mswsock

mapi32

Sections

.text Size: 103KB - Virtual size: 102KB

.rdata Size: 35KB - Virtual size: 34KB

.data Size: 12KB - Virtual size: 20KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 15KB - Virtual size: 14KB

.text
Size: 103KB - Virtual size: 102KB

.rdata
Size: 35KB - Virtual size: 34KB

.data
Size: 12KB - Virtual size: 20KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 15KB - Virtual size: 14KB