SecuriteInfo[.]com[.]Win32[.]TrojanX-gen[.]4033[.]6991[.]exe

General

Target
SecuriteInfo.com.Win32.TrojanX-gen.4033.6991.exe
Size 1.1MB
Sample231012-s2f61sha61
SHA256 1ea751606e05443d9d9cd22d7fca835fdbfb2598842685fde33b2366cbcadc08
MD5 0397229d46439b8841add4d8588afe7b
SHA1 2e2c040a6fe934848dcbca00f3f427ecab1ab0b5
SHA512 54e31b0fbd3daae6a3c7b9d10834d2bdc92d0bb3d77d732809a2d0fa34fd611df39bd1fa9aae9e4a4eb0bbc6dd19a2bda3114be9ffdb12c69f931bb559038b6e
SSDEEP 12288:aytHE+5+ova1cPJ4DVN59pAveJahNacgDS2uXYDMYSZWXgvV+6ud2l:aaHnQova2PJ4DVrM0oNacg2ZWQN+6ud
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.TrojanX-gen.4033.6991.exe

File Explorer

SecuriteInfo.com.Win32.TrojanX-gen.4033.6991.exe

.exe 1.1MB

SecuriteInfo.com.Win32.TrojanX-gen.4033.6991.exe

IMPHASH 4c2ede2d1d1824f0fded580996722f5f
SHA256 1ea751606e05443d9d9cd22d7fca835fdbfb2598842685fde33b2366cbcadc08
MD5 0397229d46439b8841add4d8588afe7b
SHA1 2e2c040a6fe934848dcbca00f3f427ecab1ab0b5
SHA512 54e31b0fbd3daae6a3c7b9d10834d2bdc92d0bb3d77d732809a2d0fa34fd611df39bd1fa9aae9e4a4eb0bbc6dd19a2bda3114be9ffdb12c69f931bb559038b6e
SSDEEP 12288:aytHE+5+ova1cPJ4DVN59pAveJahNacgDS2uXYDMYSZWXgvV+6ud2l:aaHnQova2PJ4DVrM0oNacg2ZWQN+6ud
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4566

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcAddress CloseHandle WaitForSingleObjectEx Sleep SwitchToThread GetCurrentThreadId GetExitCodeThread GetNativeSystemInfo FormatMessageA EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection QueryPerformanceCounter QueryPerformanceFrequency InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive InitializeConditionVariable WakeConditionVariable WakeAllConditionVariable SleepConditionVariableSRW LocalFree GetLocaleInfoEx EncodePointer DecodePointer MultiByteToWideChar WideCharToMultiByte LCMapStringEx SetFileInformationByHandle GetTempPathW FlsAlloc FlsGetValue FlsSetValue FlsFree InitOnceExecuteOnce SleepConditionVariableCS CreateEventExW CreateSemaphoreExW FlushProcessWriteBuffers GetCurrentProcessorNumber GetSystemTimeAsFileTime GetTickCount64 FreeLibraryWhenCallbackReturns CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork CreateThreadpoolTimer SetThreadpoolTimer WaitForThreadpoolTimerCallbacks CloseThreadpoolTimer CreateThreadpoolWait SetThreadpoolWait CloseThreadpoolWait GetModuleHandleW GetFileInformationByHandleEx CreateSymbolicLinkW GetStringTypeW CompareStringEx GetCPInfo IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess GetCurrentProcessId InitializeSListHead IsDebuggerPresent GetStartupInfoW CreateFileW RaiseException RtlUnwind InterlockedPushEntrySList InterlockedFlushSList GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW CreateThread ExitThread ResumeThread FreeLibraryAndExitThread GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetCommandLineA GetCommandLineW GetCurrentThread HeapFree GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapAlloc SetConsoleCtrlHandler GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc GetTimeZoneInformation OutputDebugStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap HeapSize WriteConsoleW

Sharing