SecuriteInfo[.]com[.]Win32[.]PWSX-gen[.]14129[.]7137[.]exe

General

Target
SecuriteInfo.com.Win32.PWSX-gen.14129.7137.exe
Size 175KB
Sample231024-mlh3saea78
SHA256 e37f694492ea3edeba2e7b6c7b51a451e802b29b11e70fe8509dfd8a3fc8bab9
MD5 dd899fafab803890b22d1003604be70f
SHA1 eafb8bc48a1200c2529179044d1a56c2b63e070e
SHA512 e89428c8f5a14641c5de0cc5e9f16a0eb49eea1529a9dd9be3bbbdbb901dbfbcc5039ed81c0f97180780aa7b7e4992a78a6d308d0fe1ae41fabcfd992ca3c716
SSDEEP 3072:56BNcJHrdomyaOv26+QwrCjY/KYJfOprT804ydmUWkDxjnDo+:0Sp5omyaOv2TQgyEfOVT/tmGdjn
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.PWSX-gen.14129.7137.exe

File Explorer

SecuriteInfo.com.Win32.PWSX-gen.14129.7137.exe

.exe 175KB

SecuriteInfo.com.Win32.PWSX-gen.14129.7137.exe

IMPHASH 79634ec8bd63a8c0671cca5d93b7313e
SHA256 e37f694492ea3edeba2e7b6c7b51a451e802b29b11e70fe8509dfd8a3fc8bab9
MD5 dd899fafab803890b22d1003604be70f
SHA1 eafb8bc48a1200c2529179044d1a56c2b63e070e
SHA512 e89428c8f5a14641c5de0cc5e9f16a0eb49eea1529a9dd9be3bbbdbb901dbfbcc5039ed81c0f97180780aa7b7e4992a78a6d308d0fe1ae41fabcfd992ca3c716
SSDEEP 3072:56BNcJHrdomyaOv26+QwrCjY/KYJfOprT804ydmUWkDxjnDo+:0Sp5omyaOv2TQgyEfOVT/tmGdjn
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

24618

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTempFileNameW SetDefaultCommConfigA FindResourceA FindFirstFileW WriteConsoleInputW lstrlenA GetDriveTypeW CommConfigDialogA WriteConsoleOutputCharacterA GetConsoleAliasA GetEnvironmentStringsW GetModuleHandleExW WriteConsoleInputA SetComputerNameW GetSystemDefaultLCID _lclose CreateNamedPipeW GenerateConsoleCtrlEvent GetConsoleAliasesA GetConsoleAliasExesW WaitNamedPipeW GetEnvironmentStrings GlobalAlloc LoadLibraryW GetLocaleInfoW _hread EnumSystemCodePagesA GetConsoleAliasW GetWriteWatch GetFileAttributesW ReplaceFileW ReadFile GetCompressedFileSizeA QueryInformationJobObject lstrlenW FindNextVolumeMountPointW GetStartupInfoW SetConsoleTitleA DeactivateActCtx GetLastError GetCommandLineW SetLastError ReadConsoleOutputCharacterA AttachConsole VerLanguageNameA CreateNamedPipeA SetVolumeLabelW RemoveDirectoryA CopyFileA EnumSystemCodePagesW FreeUserPhysicalPages GetProcessVersion FindClose UnhandledExceptionFilter MoveFileA AddAtomW CreateEventW GetCommMask SetThreadIdealProcessor SetCommMask FindAtomA FoldStringA GetSystemInfo FindNextFileA GetModuleHandleA GetCommTimeouts lstrcatW VirtualProtect CompareStringA QueryPerformanceFrequency PeekConsoleInputA GetShortPathNameW OpenSemaphoreW ReadConsoleInputW GetWindowsDirectoryW MoveFileWithProgressW GlobalAddAtomW EnumSystemLocalesW DeleteFileA lstrcpyA GetCurrentDirectoryW GetVolumeNameForVolumeMountPointA CreateFileW WideCharToMultiByte HeapFree HeapAlloc GetProcAddress GetModuleHandleW ExitProcess DecodePointer EncodePointer HeapReAlloc HeapSetInformation IsProcessorFeaturePresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection WriteFile GetModuleFileNameW Sleep HeapSize CloseHandle FreeEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW MultiByteToWideChar GetStringTypeW SetFilePointer GetConsoleCP GetConsoleMode RaiseException RtlUnwind SetStdHandle FlushFileBuffers WriteConsoleW

user32

CharUpperW

advapi32

AbortSystemShutdownW

winhttp

WinHttpReadData

Sharing