SecuriteInfo[.]com[.]Win32[.]TrojanX-gen[.]349[.]29746[.]exe

General

Target
SecuriteInfo.com.Win32.TrojanX-gen.349.29746.exe
Size 414KB
Sample231114-17b39agb67
SHA256 195256a242e1a4f2a1833194d97951ebb74ac0091b0cd6be50a3e2f01691b421
MD5 82c0215e000b9fb857bafe55e85f6b3f
SHA1 91a9f7c8afc15b90d529705b55d9782a87095f7a
SHA512 39bc2d7ff8012682f78469b5948ff626af1f783c4a665b31b511f41feb7d4a0ed0b6f7431daa63895f941d657d681cffc1a82d46417c5e9a22284702b723afd3
SSDEEP 6144:1hnttntG3PuxBHhbOsAOni+VQabylCVMI58jIRPNEISfFOk+ITjd:/ttntGfkOsM0AlCVMI58jIRPNEMUjd
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.TrojanX-gen.349.29746.exe

File Explorer

SecuriteInfo.com.Win32.TrojanX-gen.349.29746.exe

.exe 414KB

SecuriteInfo.com.Win32.TrojanX-gen.349.29746.exe

IMPHASH 21e0e8ef5bfebf9362c851b68dae053c
SHA256 195256a242e1a4f2a1833194d97951ebb74ac0091b0cd6be50a3e2f01691b421
MD5 82c0215e000b9fb857bafe55e85f6b3f
SHA1 91a9f7c8afc15b90d529705b55d9782a87095f7a
SHA512 39bc2d7ff8012682f78469b5948ff626af1f783c4a665b31b511f41feb7d4a0ed0b6f7431daa63895f941d657d681cffc1a82d46417c5e9a22284702b723afd3
SSDEEP 6144:1hnttntG3PuxBHhbOsAOni+VQabylCVMI58jIRPNEISfFOk+ITjd:/ttntGfkOsM0AlCVMI58jIRPNEMUjd
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

30467

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

ValidateRgn EnableWindow

advapi32

RegSetKeySecurity

kernel32

ReadConsoleW CreateFileW CloseHandle EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection SetEvent ResetEvent WaitForSingleObjectEx CreateEventW GetModuleHandleW GetProcAddress IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead GetCurrentProcess TerminateProcess GetExitCodeThread GetStringTypeW WideCharToMultiByte MultiByteToWideChar EncodePointer DecodePointer InitializeCriticalSectionEx LCMapStringEx WriteConsoleW GetCPInfo HeapSize RaiseException RtlUnwind GetLastError SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW HeapFree HeapAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetProcessHeap GetFileType SetStdHandle GetFileSizeEx SetFilePointerEx FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile HeapReAlloc

Sharing