SecuriteInfo[.]com[.]Win32[.]BotX-gen[.]20110[.]26939[.]exe

General

Target
SecuriteInfo.com.Win32.BotX-gen.20110.26939.exe
Size 257KB
Sample231107-ry5jrsbe52
SHA256 231ae4c87c3c2766bb7643dfd88e482f019467a6fda13feb5656a8d0d4fd746a
MD5 9765669aea3b4dde794ecebef90ef845
SHA1 dfc75656c7c7d4f685e1c96e37c78637e859c1b5
SHA512 0d794b5df2f574963fb9bcf909fbbb9ffd6e69d86b210bf81316b8e4fd7aec9385cd6f49c370fc41445681c45fdfa95982d68ca7f98225ddb15e00cc2496133b
SSDEEP 3072:mvDYPEr8KtrMQdlpdwyWgDI6mcnFd5gaPL4+OSu6p67t3fdtqU:otr86tdlpdwyxk673fusQ3r
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.BotX-gen.20110.26939.exe

File Explorer

SecuriteInfo.com.Win32.BotX-gen.20110.26939.exe

.exe 257KB

SecuriteInfo.com.Win32.BotX-gen.20110.26939.exe

IMPHASH bb25ed99266493acac5c520c9cc70bac
SHA256 231ae4c87c3c2766bb7643dfd88e482f019467a6fda13feb5656a8d0d4fd746a
MD5 9765669aea3b4dde794ecebef90ef845
SHA1 dfc75656c7c7d4f685e1c96e37c78637e859c1b5
SHA512 0d794b5df2f574963fb9bcf909fbbb9ffd6e69d86b210bf81316b8e4fd7aec9385cd6f49c370fc41445681c45fdfa95982d68ca7f98225ddb15e00cc2496133b
SSDEEP 3072:mvDYPEr8KtrMQdlpdwyWgDI6mcnFd5gaPL4+OSu6p67t3fdtqU:otr86tdlpdwyxk673fusQ3r
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

32437

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindFirstFileW SetLocaleInfoA WriteConsoleInputW lstrlenA GetConsoleAliasExesA OpenJobObjectA GetConsoleAliasA SetConsoleScreenBufferSize WriteConsoleInputA MoveFileWithProgressA ConvertFiberToThread GetPrivateProfileStringW ReadConsoleW GetWindowsDirectoryA WaitNamedPipeW GetEnvironmentStrings GetPrivateProfileIntA LoadLibraryW SetCommConfig FatalAppExitW ReadConsoleInputA _hread GetSystemPowerStatus HeapDestroy GetFileAttributesW ReplaceFileW IsDBCSLeadByte GetCompressedFileSizeA GetTimeZoneInformation CreateActCtxA FindNextVolumeMountPointW VirtualUnlock GetConsoleOutputCP GetConsoleAliasesW GetStartupInfoA GetLastError GetCurrentDirectoryW SetLastError GetProcAddress WriteProfileSectionA RemoveDirectoryA CopyFileA GlobalGetAtomNameA LocalAlloc SetConsoleCtrlHandler CreateEventW GetTapeParameters FoldStringW GlobalFindAtomW FindNextFileA GetModuleHandleA CancelIo GetProcessAffinityMask VirtualProtect GetCurrentDirectoryA CompareStringA OpenSemaphoreW GetWindowsDirectoryW FindFirstVolumeW DeleteFileW GetCurrentProcessId MoveFileWithProgressW AddConsoleAliasA GetTempPathA ReadConsoleOutputCharacterW EnumSystemLocalesW AreFileApisANSI ExpandEnvironmentStringsW CreateFileW CloseHandle WriteConsoleW InterlockedIncrement InterlockedDecrement EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MoveFileA HeapFree HeapReAlloc GetCommandLineW HeapSetInformation GetStartupInfoW RaiseException RtlUnwind HeapAlloc WideCharToMultiByte LCMapStringW MultiByteToWideChar GetCPInfo IsProcessorFeaturePresent HeapCreate HeapSize GetModuleHandleW ExitProcess SetUnhandledExceptionFilter WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetLocaleInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeW SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle

user32

CharUpperA CharToOemBuffW

Sharing