SecuriteInfo[.]com[.]BScope[.]Trojan[.]Injector[.]12346[.]26025[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

SecuriteInfo.com.BScope.Trojan.Injector.12346.26025.exe
Size

170KB
MD5

a4a7d72e6de8762255065c4f549def3a
SHA1

79721dddd9e39ea7fb1848313c3ccdabc78cf323
SHA256

e3a617bb395f30139a154592955af919b0d1e1473935f11b93da79690a2e8ca6
SHA512

a3dc5df1d85547493c39f248c300ffe940946282770676e6e255cff1681cf326a976288dae1c4d94bb572d9c339ebfcdd13a257492805eda7f317151148152a4
SSDEEP

3072:mUKuPpuTeBC5EonXqP6i0KXftJQ9/29+NF9aFRWM19yo39czge:maroY6NIfjQ9/TN+9Be

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.BScope.Trojan.Injector.12346.26025.exe

Files

SecuriteInfo.com.BScope.Trojan.Injector.12346.26025.exe
.exe windows:6 windows x86

2ceecbd2f49159411b5a842975bc55c9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrRChrIW

kernel32

GetConsoleOutputCP
HeapSize
GetConsoleMode
SetFilePointerEx
GetProcessHeap
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
GetFileType
HeapFree
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
WriteFile
GetStdHandle
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
GetLastError
RtlUnwind
RaiseException
TerminateProcess
GetCurrentProcess
GetModuleHandleW
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
GetCPInfo
LCMapStringEx
DecodePointer
EncodePointer
CloseHandle
EnumTimeFormatsW
WriteConsoleW
GetProcAddress
GetModuleHandleA
FlushFileBuffers
CreateFileW
HeapAlloc
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection

shell32

ExtractAssociatedIconExA
Shell_NotifyIcon

avifil32

AVIStreamInfo
EditStreamSetInfoA
AVIStreamBeginStreaming
AVIFileWriteData

msvfw32

ICOpen
DrawDibStop

avicap32

capGetDriverDescriptionA

odbc32

ord157
ord260
ord106
ord156
CursorLibLockStmt
ord23
ord28
ord43
ord117
ord170
ord257

resutils

ResUtilPropertyListFromParameterBlock
ResUtilGetMultiSzProperty
ResUtilResourcesEqual
ResUtilGetSzValue
ResUtilGetEnvironmentWithNetName
ResUtilGetDwordProperty
ResUtilStartResourceService

loadperf

LoadPerfCounterTextStringsW
LoadPerfCounterTextStringsA
UnloadPerfCounterTextStringsA

rtutils

TraceGetConsoleW
TraceDeregisterA
TraceGetConsoleA
TracePutsExW

mscms

CreateColorTransformW
GetPS2ColorSpaceArray
TranslateBitmapBits
GetStandardColorSpaceProfileA
AssociateColorProfileWithDeviceW
GenerateCopyFilePaths

wsnmp32

ord600
ord104
ord300
ord502
ord400
ord900
ord905
ord220
ord205

winspool.drv

DeletePrinterConnectionA
ConfigurePortW
ResetPrinterW
ScheduleJob
EnumMonitorsA
EnumPrintProcessorsW
EndDocPrinter
EnumPrinterDataW

user32

DispatchMessageW
DefWindowProcW
PostQuitMessage
RegisterClassW
TranslateMessage
GetMessageW
BeginPaint
EndPaint
InvalidateRect
SetWindowTextW
LoadImageW
MessageBoxW
LoadCursorW
CreateWindowExW

gdi32

DeleteDC
DeleteObject
SetStretchBltMode
GetObjectW
StretchBlt
CreateCompatibleDC

comdlg32

GetOpenFileNameW

Sections

.text
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2ceecbd2f49159411b5a842975bc55c9

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

kernel32

shell32

avifil32

msvfw32

avicap32

odbc32

resutils

loadperf

rtutils

mscms

wsnmp32

winspool.drv

user32

gdi32

comdlg32

Sections

.text Size: 115KB - Virtual size: 115KB

.rdata Size: 42KB - Virtual size: 41KB

.data Size: 11KB - Virtual size: 14KB

.text
Size: 115KB - Virtual size: 115KB

.rdata
Size: 42KB - Virtual size: 41KB

.data
Size: 11KB - Virtual size: 14KB