SecuriteInfo[.]com[.]Win32[.]InjectorX-gen[.]8434[.]24208

Sharing

Copy URL

Twitter E-mail

General

Target

SecuriteInfo.com.Win32.InjectorX-gen.8434.24208
Size

194KB
MD5

139d66bba502793ecd4389b3d3a78655
SHA1

3c5b90a8dfba826ad75163bee33a91548481430f
SHA256

2a4b8b4d329377ee94fbb2fdb88afa277be98d82a1373adf5e43777833720265
SHA512

58976b259fc0abd63b8d37c09ffb60282a2702150a2595070bd3292b29bb020cbb5eef6b1522c2f56a296cb0f0d1f49aa88977b4928d355ce3da3e09830fc2ca
SSDEEP

6144:DC/KpKVaJCUcRTBLohIpZdwAAzWGLsWqKM8:DCzaUUcBZXBUPeKM8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.InjectorX-gen.8434.24208

Files

SecuriteInfo.com.Win32.InjectorX-gen.8434.24208
.exe windows:6 windows x86

c525e31544d0d2c7c42fd6d6f3b56727

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmGetCandidateListW
ImmGetIMCLockCount
ImmGetCandidateListCountA
ImmUnregisterWordA
ImmGetRegisterWordStyleA
ImmUnlockIMC
ImmEnumRegisterWordW

shlwapi

StrCmpNW

kernel32

SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
EnumTimeFormatsW
HeapReAlloc
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
ReadFile
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
CloseHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
GetFileType
HeapFree
HeapAlloc
GetProcAddress
GetModuleHandleW
HeapSize
CreateFileW
GetProcessHeap
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
WriteFile
GetStdHandle
LoadLibraryExW
FreeLibrary
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringEx
GetStringTypeW
GetCPInfo
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetCurrentProcess
TerminateProcess
RaiseException
RtlUnwind
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
WriteConsoleW

shell32

SHEmptyRecycleBinW
SHFormatDrive
ExtractIconEx

wsnmp32

ord102
ord501
ord603
ord400
ord503
ord902

rtutils

RouterLogDeregisterA
LogEventW
LogErrorA
TraceGetConsoleA
RouterLogEventStringW
TraceDumpExA

mswsock

rexec
dn_expand
GetAcceptExSockaddrs
GetNameByTypeW
s_perror
SetServiceW

rtm

RtmBlockDeleteRoutes
RtmDequeueRouteChangeMessage
RtmGetNetworkCount
RtmBlockSetRouteEnable
RtmEnumerateGetNextRoute

ole32

GetHGlobalFromStream
CreateObjrefMoniker
HPALETTE_UserMarshal
OleCreateLink
OleSetAutoConvert

gdi32

EndPath
PolyPolygon
RemoveFontMemResourceEx
GetFontAssocStatus
GetBitmapBits

oleaut32

VarI1FromStr
VarSu
VarDecSu
VarCyFromUI1
DispCallFunc
VarAnd

Sections

.text
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.yak
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c525e31544d0d2c7c42fd6d6f3b56727

Headers

DLL Characteristics

File Characteristics

Imports

imm32

shlwapi

kernel32

shell32

wsnmp32

rtutils

mswsock

rtm

ole32

gdi32

oleaut32

Sections

.text Size: 134KB - Virtual size: 133KB

.rdata Size: 42KB - Virtual size: 41KB

.data Size: 4KB - Virtual size: 7KB

.yak Size: 6KB - Virtual size: 5KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 134KB - Virtual size: 133KB

.rdata
Size: 42KB - Virtual size: 41KB

.data
Size: 4KB - Virtual size: 7KB

.yak
Size: 6KB - Virtual size: 5KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 7KB - Virtual size: 6KB