SecuriteInfo[.]com[.]Win32[.]PWSX-gen[.]25219[.]13899[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.PWSX-gen.25219.13899.exe
Size

178KB
MD5

88ac310a2e8d61f7bafd6c03755e121a
SHA1

b6db36556ea6fea385875621b97d93a24efbef39
SHA256

cf2c513cfc0810a9a2b62ad2166d9635d03945d98747869aad73488f35c62f81
SHA512

6fc37d25f22539b3583308d051ca6f78c733ed0efa500bc059f1a2524b8bbfa2588d51ea3252fce07a96d984a7f3a354b8a938e07d1a4dd1a59ee96492a91bf8
SSDEEP

3072:xJTqFhRXhfKmXV/BkjRGZnSVMDGtBtRC+LGZbYVP5V:xJTqhhl/usS0GthCCL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.PWSX-gen.25219.13899.exe

Files

SecuriteInfo.com.Win32.PWSX-gen.25219.13899.exe
.exe windows:6 windows x86 arch:x86

487a8406e26ff2bbc79d17b6808bf18a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrRChrA

kernel32

CreateFileW
OutputDebugStringW
EnumSystemCodePagesA
VirtualAlloc
GetTempPathW
FindNextFileW
WriteConsoleW
SetStdHandle
FindFirstFileW
FindClose
DeleteFileW
LoadLibraryExW
SetEndOfFile
ReadConsoleW
LeaveCriticalSection
HeapReAlloc
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameW
SetFilePointerEx
ReadFile
GetFileType
GetStdHandle
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
CloseHandle
GetProcessHeap
IsDebuggerPresent
GetCurrentThreadId
GetOEMCP
GetACP
IsValidCodePage
HeapSize
AreFileApisANSI
GetModuleHandleExW
ExitProcess
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
IsProcessorFeaturePresent
GetProcAddress
GetModuleHandleW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
EnterCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
GetLastError
HeapFree
RaiseException
RtlUnwind
GetCommandLineW
GetCPInfo
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc

pdh

PdhGetDataSourceTimeRangeA
PdhVbAddCounter

avifil32

AVIStreamGetFrameClose
AVIFileInfoA
AVIFileGetStream
AVIStreamWrite
EditStreamSetInfoA
AVIFileOpenW

avicap32

capGetDriverDescriptionA

msvfw32

MCIWndCreate
ICClose
ICDrawBegin

urlmon

UrlMkSetSessionOption
CoGetClassObjectFromURL
IsLoggingEnabledA
URLDownloadA
HlinkSimpleNavigateToString
RevokeFormatEnumerator

user32

SetMenuItemBitmaps
DdeKeepStringHandle
RegisterDeviceNotificationW
CopyAcceleratorTableW
ChangeMenuW
DdeCmpStringHandles
UnhookWindowsHookEx
BroadcastSystemMessage
DdeQueryStringA
MessageBoxExW
GetWindowRect

winmm

timeBeginPeriod
midiOutPrepareHeader
mod32Message
mixerGetID
midiInOpen
joyReleaseCapture
midiInGetID
mmGetCurrentTask

mpr

WNetGetResourceParentA
WNetEnumResourceW
WNetGetProviderNameW
WNetGetConnectionW
WNetCancelConnection2A
WNetGetUserA
WNetOpenEnumW
WNetCancelConnection2W
MultinetGetConnectionPerformanceW

shell32

SHGetDataFromIDListW
SHInvokePrinterCommandW
FindExecutableA
SHGetInstanceExplorer
SHFileOperationA

ole32

CoInstall

Sections

.text
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

487a8406e26ff2bbc79d17b6808bf18a

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

kernel32

pdh

avifil32

avicap32

msvfw32

urlmon

user32

winmm

mpr

shell32

ole32

Sections

.text Size: 125KB - Virtual size: 124KB

.rdata Size: 38KB - Virtual size: 37KB

.data Size: 14KB - Virtual size: 23KB

.text
Size: 125KB - Virtual size: 124KB

.rdata
Size: 38KB - Virtual size: 37KB

.data
Size: 14KB - Virtual size: 23KB