SecuriteInfo[.]com[.]Win32[.]TrojanX-gen[.]28606[.]15818[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.TrojanX-gen.28606.15818.exe
Size

188KB
MD5

f645ecc293eafc9632d2ddf3e6f6f82b
SHA1

7e53ced2cb421cd89da1168cd5f962c933450bbf
SHA256

af6e301e131fa59ba3bfae3288cbc3d1469d429d8986bbcbee5d22116456c98d
SHA512

bc975fa4842d59498a13728b2cf1349e189791ef53a14f20026afbc37e0dff77f3e4b05fc6f8f7447afbdff50612aadae39f0f6d7b830e9b42bf6b86478ee2f8
SSDEEP

3072:HjQNSbK4p288FRMRcg9vDPw1p8taHV3sLWjz+EC6wa:HMU288F679Mit+VcLYzv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.TrojanX-gen.28606.15818.exe

Files

SecuriteInfo.com.Win32.TrojanX-gen.28606.15818.exe
.exe windows:6 windows x86 arch:x86

a29e004de0a420c30a3b8893479fb83c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathW
GetTimeFormatW
GenerateConsoleCtrlEvent
GetFileSize
GetVersionExA
GetConsoleAliasesW
BuildCommDCBA
VirtualAlloc
CloseHandle
CreateFileW
FlushFileBuffers
WriteConsoleW
SetStdHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
OutputDebugStringW
LoadLibraryExW
GetThreadTimes
HeapReAlloc
GetOEMCP
GetACP
IsValidCodePage
IsDebuggerPresent
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
WriteFile
GetModuleFileNameW
GetFileType
GetStdHandle
GetCurrentThreadId
GetProcessHeap
HeapSize
GetModuleHandleExW
ExitProcess
GlobalFlags
SetConsoleMode
GetCPInfoExW
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
GetStringTypeW
GetLastError
HeapFree
RaiseException
RtlUnwind
GetCommandLineW
GetCPInfo
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
IsProcessorFeaturePresent
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW

odbc32

ord24
ord10
ord33

oleaut32

VarI1FromCy
VarCyAdd
VarR8FromR4
VarUI1FromI1

winmm

mmioSendMessage
mmioFlush
SendDriverMessage
midiOutUnprepareHeader
sndPlaySoundA
midiInStart

msi

ord25
ord21
ord22
ord135
ord160
ord148
ord159
ord74
ord88

rtm

RtmCloseEnumerationHandle
MgmDeRegisterMProtocol
RtmGetNetworkCount
RtmLookupIPDestination
MgmTakeInterfaceOwnership
RtmDeleteRoute
MgmGetFirstMfe

crypt32

CertCompareCertificate
CryptFormatObject
CertOpenSystemStoreA

Sections

.text
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a29e004de0a420c30a3b8893479fb83c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

odbc32

oleaut32

winmm

msi

rtm

crypt32

Sections

.text Size: 140KB - Virtual size: 140KB

.rdata Size: 34KB - Virtual size: 34KB

.data Size: 12KB - Virtual size: 20KB

.text
Size: 140KB - Virtual size: 140KB

.rdata
Size: 34KB - Virtual size: 34KB

.data
Size: 12KB - Virtual size: 20KB