SecuriteInfo[.]com[.]Win32[.]TrojanX-gen[.]10688[.]3868[.]exe

General

Target
SecuriteInfo.com.Win32.TrojanX-gen.10688.3868.exe
Size 281KB
Sample231108-lbbehsgh7y
SHA256 afaf73afdd2ecbb34ff36e0a4e5e31dddfcbe593185af268d745ee3d7bfd45b2
MD5 d872ecf388abbcea1332fb4ea38b5a36
SHA1 5fcbd18673bb9cd3218a946949e9e98d711c0f48
SHA512 d602a405b0d241870545ae396b72565c5f607f117d948ee7d08b6dd2ce086e711d6758e338d7e9bc2972cf4ef4b8b4bbd7f9687a48596229a6f446cb8964ddc8
SSDEEP 3072:dJACObLPhdS8UGz2sZXQDW13/Xwr6jy+W7tvPTKgnXJL3YyrAld:ObzrS8UGVXX3/XRW8gndI
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.TrojanX-gen.10688.3868.exe

File Explorer

SecuriteInfo.com.Win32.TrojanX-gen.10688.3868.exe

.exe 281KB

SecuriteInfo.com.Win32.TrojanX-gen.10688.3868.exe

IMPHASH b2b0b7ed9f4668d7f13e657846ddb0ef
SHA256 afaf73afdd2ecbb34ff36e0a4e5e31dddfcbe593185af268d745ee3d7bfd45b2
MD5 d872ecf388abbcea1332fb4ea38b5a36
SHA1 5fcbd18673bb9cd3218a946949e9e98d711c0f48
SHA512 d602a405b0d241870545ae396b72565c5f607f117d948ee7d08b6dd2ce086e711d6758e338d7e9bc2972cf4ef4b8b4bbd7f9687a48596229a6f446cb8964ddc8
SSDEEP 3072:dJACObLPhdS8UGz2sZXQDW13/Xwr6jy+W7tvPTKgnXJL3YyrAld:ObzrS8UGVXX3/XRW8gndI
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

33036

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindFirstFileW SetLocaleInfoA WriteConsoleInputW lstrlenA GetConsoleAliasExesA GetCPInfo OpenJobObjectA GetEnvironmentStringsW WriteConsoleInputA MoveFileWithProgressA GetModuleHandleW ExpandEnvironmentStringsA GetPrivateProfileStringW ReadConsoleW GetWindowsDirectoryA WaitNamedPipeW GetPrivateProfileIntA GlobalFindAtomA LoadLibraryW SetCommConfig FatalAppExitW ReadConsoleInputA CopyFileW _hread GetSystemPowerStatus HeapCreate GetConsoleAliasW GetFileAttributesW ReplaceFileW GetCompressedFileSizeA GetTimeZoneInformation CreateActCtxA FindNextVolumeMountPointW GetTempPathW EnumSystemLocalesA GetConsoleOutputCP GetConsoleAliasesW GetStartupInfoA GetLastError GetCurrentDirectoryW ReadConsoleOutputCharacterA GetProcAddress RemoveDirectoryA GlobalGetAtomNameA LocalAlloc SetConsoleCtrlHandler GetTapeParameters FoldStringA FindNextFileA GetModuleHandleA CancelIo GetProcessAffinityMask VirtualProtect GetCurrentDirectoryA CompareStringA OpenSemaphoreW FindFirstVolumeA GetWindowsDirectoryW DeleteFileW AddConsoleAliasA GetTempPathA GetProfileSectionW AreFileApisANSI ExpandEnvironmentStringsW CloseHandle CreateFileW WriteConsoleW InterlockedIncrement InterlockedDecrement EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MoveFileA HeapFree ExitProcess HeapReAlloc GetCommandLineW HeapSetInformation GetStartupInfoW RaiseException RtlUnwind HeapAlloc WideCharToMultiByte LCMapStringW MultiByteToWideChar IsProcessorFeaturePresent InitializeCriticalSectionAndSpinCount GetLocaleInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA IsValidLocale GetStringTypeW SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle

user32

CharUpperW CharToOemBuffA

Sharing