SecuriteInfo[.]com[.]Win32[.]BotX-gen[.]4091[.]1918[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Win32.BotX-gen.4091.1918.exe
Size 267KB
Sample231013-e95bxsga65
SHA256 56be912ce754d75f3385dab925ee34d9a0a1e07fe841c6a2e9adafa8021c99bc
MD5 6cf01c815d1489b617c05fcd4640fffd
SHA1 2ad52ebfc86e11c71cc901f18e6c4f80eac55079
SHA512 33f2dab46769d6d88b953b7b3972f2561fde10998c1aebbb88bc5366d035b5c706ab4c5209868919b3f01f4e4501da5e06cfe468168dd1be0edea398dd5d28f6
SSDEEP 3072:SEI3+gesvpzB4jtXebGwIBsCTZDAIpzNxU4YDG9DZINLgJNZqMG:XI3JvpzB4jtXlB3TvhNxU4YDCdINLj
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.BotX-gen.4091.1918.exe

File Explorer

SecuriteInfo.com.Win32.BotX-gen.4091.1918.exe

.exe 267KB

SecuriteInfo.com.Win32.BotX-gen.4091.1918.exe

IMPHASH be971270bdc2a8fd4ff1ab41bb993dd1
SHA256 56be912ce754d75f3385dab925ee34d9a0a1e07fe841c6a2e9adafa8021c99bc
MD5 6cf01c815d1489b617c05fcd4640fffd
SHA1 2ad52ebfc86e11c71cc901f18e6c4f80eac55079
SHA512 33f2dab46769d6d88b953b7b3972f2561fde10998c1aebbb88bc5366d035b5c706ab4c5209868919b3f01f4e4501da5e06cfe468168dd1be0edea398dd5d28f6
SSDEEP 3072:SEI3+gesvpzB4jtXebGwIBsCTZDAIpzNxU4YDG9DZINLgJNZqMG:XI3JvpzB4jtXlB3TvhNxU4YDCdINLj
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

23673

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNumaProcessorNode MoveFileExA BuildCommDCBAndTimeoutsA SystemTimeToTzSpecificLocalTime InterlockedDecrement SetDefaultCommConfigW GetEnvironmentStringsW SetConsoleScreenBufferSize AddConsoleAliasW SetVolumeMountPointW BackupSeek GetModuleHandleW GenerateConsoleCtrlEvent GetNumberFormatA SetFileTime GetConsoleAliasExesW EnumTimeFormatsA GetCommandLineA GetDriveTypeA GetEnvironmentStrings GetPrivateProfileIntA LoadLibraryW TerminateThread FatalAppExitW CopyFileW SetConsoleCP GetVolumePathNameA GetStartupInfoW CreateMailslotW CreateJobObjectA InterlockedExchange SetThreadLocale OpenMutexW GetConsoleAliasesLengthW GetLastError GetCurrentDirectoryW SetLastError PeekConsoleInputW EnumSystemCodePagesW LoadLibraryA GetProcessId InterlockedExchangeAdd LocalAlloc GetFileType RemoveDirectoryW GetProfileStringA FindNextChangeNotification FindAtomA GlobalWire EnumDateFormatsA GetModuleHandleA SetLocaleInfoW FreeEnvironmentStringsW FindNextFileW VirtualProtect GetCurrentDirectoryA EnumDateFormatsW GetShortPathNameW OpenSemaphoreW FindAtomW GetWindowsDirectoryW FindFirstVolumeW DeleteFileW CreateFileW EnumCalendarInfoA GetCommandLineW FindFirstFileW EnumResourceNamesW GetComputerNameA GetHandleInformation ReadFile FlushFileBuffers GetStringTypeW LCMapStringW HeapFree HeapAlloc GetProcAddress ExitProcess DecodePointer DeleteFileA EncodePointer HeapReAlloc HeapSetInformation RaiseException UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess IsProcessorFeaturePresent HeapCreate WriteFile GetStdHandle GetModuleFileNameW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId Sleep HeapSize SetHandleCount QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind MultiByteToWideChar SetStdHandle WriteConsoleW CloseHandle

user32

GetListBoxInfo CharUpperW

gdi32

GetCharWidthW GetTextFaceW SelectPalette

advapi32

LookupAccountSidW

shell32

DragFinish

ole32

CoGetInstanceFromFile

winhttp

WinHttpWriteData