SecuriteInfo[.]com[.]Win32[.]TrojanX-gen[.]19108[.]28065

Sharing

Copy URL

Twitter E-mail

General

Target

SecuriteInfo.com.Win32.TrojanX-gen.19108.28065
Size

188KB
MD5

5629334d6eab1a1bdd9f4c16a53a52ca
SHA1

5781b115363a2c8ae0cadea213b8caa9b4b00e38
SHA256

89805045700b583994290d7d900e79208c2a542d6309b901b5ae470b42b96c06
SHA512

6fb4ef01104215266f9b483457d85b4ca8f777103917953dfda16608749f3de5698bf7e68a853f52678824cedad772285305269968476710a496e2428c4ae6e3
SSDEEP

3072:Q5JNSbK4JW88FRMRcAZPDvwVVc2yD1rMLm6z+ECaZAC:QF0W88F6bZs+2S1QLJzH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.TrojanX-gen.19108.28065

Files

SecuriteInfo.com.Win32.TrojanX-gen.19108.28065
.exe windows:6 windows x86 arch:x86

a29e004de0a420c30a3b8893479fb83c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathW
GetTimeFormatW
GenerateConsoleCtrlEvent
GetFileSize
GetVersionExA
GetConsoleAliasesW
BuildCommDCBA
VirtualAlloc
CloseHandle
CreateFileW
FlushFileBuffers
WriteConsoleW
SetStdHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
OutputDebugStringW
LoadLibraryExW
GetThreadTimes
HeapReAlloc
GetOEMCP
GetACP
IsValidCodePage
IsDebuggerPresent
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
WriteFile
GetModuleFileNameW
GetFileType
GetStdHandle
GetCurrentThreadId
GetProcessHeap
HeapSize
GetModuleHandleExW
ExitProcess
GlobalFlags
SetConsoleMode
GetCPInfoExW
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
GetStringTypeW
GetLastError
HeapFree
RaiseException
RtlUnwind
GetCommandLineW
GetCPInfo
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
IsProcessorFeaturePresent
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW

odbc32

ord24
ord10
ord33

oleaut32

VarI1FromCy
VarCyAdd
VarR8FromR4
VarUI1FromI1

winmm

mmioSendMessage
mmioFlush
SendDriverMessage
midiOutUnprepareHeader
sndPlaySoundA
midiInStart

msi

ord25
ord21
ord22
ord135
ord160
ord148
ord159
ord74
ord88

rtm

RtmCloseEnumerationHandle
MgmDeRegisterMProtocol
RtmGetNetworkCount
RtmLookupIPDestination
MgmTakeInterfaceOwnership
RtmDeleteRoute
MgmGetFirstMfe

crypt32

CertCompareCertificate
CryptFormatObject
CertOpenSystemStoreA

Sections

.text
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a29e004de0a420c30a3b8893479fb83c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

odbc32

oleaut32

winmm

msi

rtm

crypt32

Sections

.text Size: 140KB - Virtual size: 140KB

.rdata Size: 34KB - Virtual size: 34KB

.data Size: 12KB - Virtual size: 20KB

.text
Size: 140KB - Virtual size: 140KB

.rdata
Size: 34KB - Virtual size: 34KB

.data
Size: 12KB - Virtual size: 20KB