SecuriteInfo[.]com[.]Win32[.]BotX-gen[.]31335[.]5127[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Win32.BotX-gen.31335.5127.exe
Size 203KB
Sample240114-splkzacfc2
SHA256 3555ecd8bb270312994e03bf64695a3f1c0213a2abf85b890ebe2bb40a9648a3
MD5 e80ed6ccb333b7fc33ffc98bca43b57d
SHA1 170281a608fe94eee06a9f45466f6a47bd2272e3
SHA512 3209c004cebb1e2f544f7d8457175a62da8a225bc08bcbb051c240eddc610ca8e1ddfe7f6d758d2e09517030afad689b6805fc2b8b801a1f182c04369191a30d
SSDEEP 3072:eafjdfYraZJXENc8uCXJiXK1K2LEpzUCV+PaIh9bwdANblLNBNKRrxbU+cmH:eafjqQ15OCyLLkCVkxbDco
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.BotX-gen.31335.5127.exe

File Explorer

SecuriteInfo.com.Win32.BotX-gen.31335.5127.exe

.exe 203KB

SecuriteInfo.com.Win32.BotX-gen.31335.5127.exe

IMPHASH 969e5c4e7319e4374fd23d204f0f85f0
SHA256 3555ecd8bb270312994e03bf64695a3f1c0213a2abf85b890ebe2bb40a9648a3
MD5 e80ed6ccb333b7fc33ffc98bca43b57d
SHA1 170281a608fe94eee06a9f45466f6a47bd2272e3
SHA512 3209c004cebb1e2f544f7d8457175a62da8a225bc08bcbb051c240eddc610ca8e1ddfe7f6d758d2e09517030afad689b6805fc2b8b801a1f182c04369191a30d
SSDEEP 3072:eafjdfYraZJXENc8uCXJiXK1K2LEpzUCV+PaIh9bwdANblLNBNKRrxbU+cmH:eafjqQ15OCyLLkCVkxbDco
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10397

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedDecrement FreeEnvironmentStringsA GetModuleHandleW GetTickCount VirtualFree LoadLibraryW GetTimeFormatW GetAtomNameW CompareStringW IsBadStringPtrA LCMapStringA GetConsoleAliasesW GetLastError GetProcAddress GetLongPathNameA GetTapeStatus GetConsoleAliasExesLengthA HeapSize LoadLibraryA LocalAlloc WritePrivateProfileStringA SetConsoleOutputCP GetModuleFileNameA lstrcatW FreeEnvironmentStringsW SetCalendarInfoA LocalFree CompareStringA GetTimeZoneInformation GetLocaleInfoW LCMapStringW GetStringTypeW TlsGetValue GetLocaleInfoA GetProcessHeaps GetEnvironmentVariableW MultiByteToWideChar GetStringTypeA GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetCurrentThread Sleep ExitProcess WriteFile GetStdHandle GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate HeapDestroy QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection FatalAppExitA EnterCriticalSection VirtualAlloc HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage SetConsoleCtrlHandler FreeLibrary InterlockedExchange InitializeCriticalSectionAndSpinCount GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale SetEnvironmentVariableA

user32

GetMonitorInfoA GetForegroundWindow GetKeyboardType LookupIconIdFromDirectory

gdi32

GetBoundsRect

advapi32

EnumDependentServicesW

ole32

CreateDataCache