SecuriteInfo[.]com[.]Win32[.]PWSX-gen[.]27268[.]14094

General

Target
SecuriteInfo.com.Win32.PWSX-gen.27268.14094
Size 223KB
Sample240121-mlsbfsbcbl
SHA256 b996a1613f4254a630d0b3889c71e1c500be05a9c7a03ec97130ca0998009b70
MD5 16ea7f0ecdff9eac933dbf9babeff1ef
SHA1 2816c942dd3e0f2ed3fd19fae7f193273a39e81a
SHA512 60bf08f445a213797ede782da15d6c4202913ed785e733985ac35cec7ad8cd266d85281eab5c5bcf1b68077248269bf1b8eeb7329a00dc10d1effbdd67f0be88
SSDEEP 3072:DDp1Df/El6jtmnmOU6YtwjwVWKOrLq62gZNNfv3UsPlroAGeHY2tw:DHL/C6OhwDOrP2gZX/UsPlt
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.PWSX-gen.27268.14094

File Explorer

SecuriteInfo.com.Win32.PWSX-gen.27268.14094

.exe 223KB

SecuriteInfo.com.Win32.PWSX-gen.27268.14094

IMPHASH 746daee29236627ffe8f168625f0fd18
SHA256 b996a1613f4254a630d0b3889c71e1c500be05a9c7a03ec97130ca0998009b70
MD5 16ea7f0ecdff9eac933dbf9babeff1ef
SHA1 2816c942dd3e0f2ed3fd19fae7f193273a39e81a
SHA512 60bf08f445a213797ede782da15d6c4202913ed785e733985ac35cec7ad8cd266d85281eab5c5bcf1b68077248269bf1b8eeb7329a00dc10d1effbdd67f0be88
SSDEEP 3072:DDp1Df/El6jtmnmOU6YtwjwVWKOrLq62gZNNfv3UsPlroAGeHY2tw:DHL/C6OhwDOrP2gZX/UsPlt
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5634

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLocaleInfoA FreeEnvironmentStringsA GetModuleHandleW GetTickCount LocalFlags GetConsoleAliasesA TlsSetValue LoadLibraryW LocalShrink GetConsoleAliasExesLengthW HeapCreate GetAtomNameW GetEnvironmentVariableA CompareStringW SetConsoleTitleA IsBadStringPtrW RaiseException InterlockedExchange GetLastError SetLastError GetProcAddress SetComputerNameA PrepareTape LoadLibraryA OpenWaitableTimerW LocalAlloc SetCalendarInfoW GetTapeParameters GetModuleFileNameA CompareStringA LocalFree WritePrivateProfileStringW FindResourceA HeapAlloc GetCommandLineW HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DecodePointer EncodePointer ExitProcess WriteFile GetStdHandle GetModuleFileNameW HeapDestroy FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetCurrentThread QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage HeapFree Sleep FatalAppExitA SetConsoleCtrlHandler FreeLibrary GetLocaleInfoW RtlUnwind SetStdHandle WriteConsoleW MultiByteToWideChar LCMapStringW GetStringTypeW HeapReAlloc IsProcessorFeaturePresent HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale CreateFileW CloseHandle FlushFileBuffers

advapi32

OpenEventLogW

Sharing