SecuriteInfo[.]com[.]Win32[.]AdwareX-gen[.]16360[.]17918

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.AdwareX-gen.16360.17918
Size

194KB
MD5

12eb20ad42c56c117a003959f664ec59
SHA1

ee78ad08c205a3a1d3dc260d7fd0141e5e0dd488
SHA256

05fb5835fab54db2c4e8970a25126d4a57d9544a2e2671d3cc823fa63e115b5e
SHA512

90cee9e44db95e2d9e8349cac60e20c3c0bd4bb97f3496044743945c2b41fb75e342eb2c77f970cfc15f41c6f6908d119af93238e9318dc681b3c3aff49c7e0b
SSDEEP

6144:LC/KpKtaJCUcRTBLohIpZdwAAzuGLoW6HM8:LCDaUUcBZXBU36HM8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.AdwareX-gen.16360.17918

Files

SecuriteInfo.com.Win32.AdwareX-gen.16360.17918
.exe windows:6 windows x86

c525e31544d0d2c7c42fd6d6f3b56727

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmGetCandidateListW
ImmGetIMCLockCount
ImmGetCandidateListCountA
ImmUnregisterWordA
ImmGetRegisterWordStyleA
ImmUnlockIMC
ImmEnumRegisterWordW

shlwapi

StrCmpNW

kernel32

SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
EnumTimeFormatsW
HeapReAlloc
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
ReadFile
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
CloseHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
GetFileType
HeapFree
HeapAlloc
GetProcAddress
GetModuleHandleW
HeapSize
CreateFileW
GetProcessHeap
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
WriteFile
GetStdHandle
LoadLibraryExW
FreeLibrary
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringEx
GetStringTypeW
GetCPInfo
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetCurrentProcess
TerminateProcess
RaiseException
RtlUnwind
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
WriteConsoleW

shell32

SHEmptyRecycleBinW
SHFormatDrive
ExtractIconEx

wsnmp32

ord102
ord501
ord603
ord400
ord503
ord902

rtutils

RouterLogDeregisterA
LogEventW
LogErrorA
TraceGetConsoleA
RouterLogEventStringW
TraceDumpExA

mswsock

rexec
dn_expand
GetAcceptExSockaddrs
GetNameByTypeW
s_perror
SetServiceW

rtm

RtmBlockDeleteRoutes
RtmDequeueRouteChangeMessage
RtmGetNetworkCount
RtmBlockSetRouteEnable
RtmEnumerateGetNextRoute

ole32

GetHGlobalFromStream
CreateObjrefMoniker
HPALETTE_UserMarshal
OleCreateLink
OleSetAutoConvert

gdi32

EndPath
PolyPolygon
RemoveFontMemResourceEx
GetFontAssocStatus
GetBitmapBits

oleaut32

VarI1FromStr
VarSu
VarDecSu
VarCyFromUI1
DispCallFunc
VarAnd

Sections

.text
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.yak
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c525e31544d0d2c7c42fd6d6f3b56727

Headers

DLL Characteristics

File Characteristics

Imports

imm32

shlwapi

kernel32

shell32

wsnmp32

rtutils

mswsock

rtm

ole32

gdi32

oleaut32

Sections

.text Size: 134KB - Virtual size: 133KB

.rdata Size: 42KB - Virtual size: 41KB

.data Size: 4KB - Virtual size: 7KB

.yak Size: 6KB - Virtual size: 5KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 134KB - Virtual size: 133KB

.rdata
Size: 42KB - Virtual size: 41KB

.data
Size: 4KB - Virtual size: 7KB

.yak
Size: 6KB - Virtual size: 5KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 7KB - Virtual size: 6KB