Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.W32.DistNet.C.tr.16060.4680.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.W32.DistNet.C.tr.16060.4680.exe
Resource
win10v2004-20231020-en
General
-
Target
SecuriteInfo.com.W32.DistNet.C.tr.16060.4680.exe
-
Size
9KB
-
MD5
53ef14df35cd281941414d85f40588fc
-
SHA1
a82ae20541446a9bb4209c1f1886c2d9b1d7d267
-
SHA256
b4a57873984bbbb50effcf6b769e593956ed9c88140829aaae57374861caa5fb
-
SHA512
e3652afb0fec009c2f59d2f282609168401f1a826f3e26908b612b5a4c782924f936ddf8812b41fd8736af83de7e8159fc39350c3dbe620fd53366f70c0c14b6
-
SSDEEP
192:iewcylS7iBVqiogBrKiRxV1BG4FAxZBT7GgK:yxtVfoArxh1pAxZBZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.W32.DistNet.C.tr.16060.4680.exe
Files
-
SecuriteInfo.com.W32.DistNet.C.tr.16060.4680.exe.exe windows:5 windows x86
a33c0c9043eb309725d06f84c039c662
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetSystemMetrics
wsprintfA
FindWindowA
IsWindow
SendMessageA
CharLowerBuffA
kernel32
GetProcAddress
SetProcessShutdownParameters
SetConsoleCtrlHandler
lstrcmpiA
CreateFileA
CreatePipe
CloseHandle
WriteConsoleA
GetStdHandle
lstrlenA
LocalFree
FormatMessageA
GetLastError
GetModuleFileNameA
lstrcpynA
GetCommandLineA
lstrcpyA
Sleep
GenerateConsoleCtrlEvent
FlushFileBuffers
WriteFile
GetFileType
SetConsoleTitleA
GetTickCount
GetModuleHandleA
GetConsoleTitleA
FreeLibrary
LoadLibraryExA
FlushConsoleInputBuffer
ReadConsoleInputA
PeekConsoleInputA
GetNumberOfConsoleInputEvents
SetConsoleCursorPosition
FillConsoleOutputAttribute
FillConsoleOutputCharacterA
GetConsoleScreenBufferInfo
ReadFile
PeekNamedPipe
GetExitCodeProcess
WaitForSingleObject
WaitForMultipleObjects
GetConsoleMode
SetConsoleMode
SetLastError
CreateProcessA
GetStartupInfoA
SetEnvironmentVariableA
GetEnvironmentVariableA
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ