SecuriteInfo[.]com[.]Win32[.]BotX-gen[.]6122[.]12428[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Win32.BotX-gen.6122.12428.exe
Size 274KB
Sample231007-d3l2bsbc45
SHA256 fed65d2ec645b2a01ea7ba68810632bcad754687aa921be620358403ab06f7ab
MD5 dde202b7adaadf9c8d422216dc3ebec7
SHA1 3b05869d932629e542baff3e11b3e6000dbd210b
SHA512 c8a53e724576e255a73835cd0c8efc7b5e733707e4eb8ef50ea2d1bbfc3bfec63177dcd0ee099392513f7457f6ffb111c7e97f3ec00c1aebe9c6f01b89c2364d
SSDEEP 3072:3asNdZ+OXkuSNvOGhPfh95A+4eGB4ZHqG3oSRoV8:qoZJXkuWfh95OePRpoPV
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.BotX-gen.6122.12428.exe

File Explorer

SecuriteInfo.com.Win32.BotX-gen.6122.12428.exe

.exe 274KB

SecuriteInfo.com.Win32.BotX-gen.6122.12428.exe

IMPHASH 1329a392a27bb099e5f0069fb4bf5f7f
SHA256 fed65d2ec645b2a01ea7ba68810632bcad754687aa921be620358403ab06f7ab
MD5 dde202b7adaadf9c8d422216dc3ebec7
SHA1 3b05869d932629e542baff3e11b3e6000dbd210b
SHA512 c8a53e724576e255a73835cd0c8efc7b5e733707e4eb8ef50ea2d1bbfc3bfec63177dcd0ee099392513f7457f6ffb111c7e97f3ec00c1aebe9c6f01b89c2364d
SSDEEP 3072:3asNdZ+OXkuSNvOGhPfh95A+4eGB4ZHqG3oSRoV8:qoZJXkuWfh95OePRpoPV
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

19931

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesA CommConfigDialogA FindResourceW InterlockedDecrement SetDefaultCommConfigW QueryPerformanceCounter GetNamedPipeHandleStateA GetEnvironmentStringsW GetComputerNameW OpenSemaphoreA CreateHardLinkA FreeEnvironmentStringsA SetTapeParameters FindNextVolumeMountPointA ConvertFiberToThread ReadConsoleW WaitNamedPipeW EnumTimeFormatsA WriteFile GetCommandLineA GetDriveTypeA GetEnvironmentStrings FindResourceExA GetConsoleCP GlobalAlloc LoadLibraryW GetLocaleInfoW CopyFileW GetCalendarInfoA IsBadCodePtr SetConsoleCP DeleteVolumeMountPointW InterlockedPopEntrySList GetFileAttributesA EnumSystemCodePagesA SetConsoleMode SetSystemPowerState GetAtomNameW IsDBCSLeadByte GetModuleHandleExA GetACP GetVolumePathNameA GetStartupInfoW CreateMailslotW DisconnectNamedPipe GetShortPathNameA GetConsoleAliasesW InterlockedExchange GetLastError SetLastError ReadConsoleOutputCharacterA PeekConsoleInputW EnumSystemCodePagesW SetComputerNameA FindClose InterlockedExchangeAdd SetConsoleCtrlHandler RemoveDirectoryW AddAtomA HeapWalk OpenJobObjectW SetCommMask GetPrivateProfileSectionNamesA FindNextFileA EnumDateFormatsA GetModuleHandleA GetStringTypeW VirtualProtect GetShortPathNameW SetCalendarInfoA ReadConsoleInputW GetWindowsDirectoryW FindFirstVolumeW GetVolumeNameForVolumeMountPointW DeleteFileW GetCurrentProcessId AddConsoleAliasA ReadFile WriteConsoleW WriteConsoleInputW GetConsoleAliasesLengthW GetCompressedFileSizeA GetTempFileNameW WideCharToMultiByte MoveFileA HeapFree HeapAlloc GetProcAddress GetModuleHandleW ExitProcess DecodePointer HeapReAlloc GetCommandLineW HeapSetInformation RaiseException GetCPInfo InterlockedIncrement GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess IsProcessorFeaturePresent HeapCreate EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection GetModuleFileNameW SetFilePointer CloseHandle FreeEnvironmentStringsW GetTickCount GetSystemTimeAsFileTime LCMapStringW MultiByteToWideChar Sleep GetConsoleMode RtlUnwind SetStdHandle FlushFileBuffers HeapSize CreateFileW

user32

CharUpperBuffA CharUpperW

gdi32

GetKerningPairsA

advapi32

RevertToSelf

winhttp

WinHttpReadData