SecuriteInfo[.]com[.]Variant[.]Johnnie[.]255811[.]4892[.]11381

Resubmissions

24-01-2024 07:41

240124-jh881sdbd8 10

23-01-2024 11:54

240123-n22qhahhfj 10

24-06-2020 14:53

200624-jtkdx94cps 10

Sharing

Copy URL

Twitter E-mail

General

Target

SecuriteInfo.com.Variant.Johnnie.255811.4892.11381
Size

424KB
MD5

fc33761a594599efe5617c8359531b38
SHA1

c85e06833ba3a037e3685dd05308ef98e2c72e82
SHA256

c8b452572f409a7d0752734334371c900983c8e15cbf8299bda7fe7a33a1047e
SHA512

5566c9fbf50ad90db1b6f0ef66e56273acfe64d4855caf818ec1caf208016688c64cef75bfd58e1dcf2883a99576a717a26c39e55af003dd87d15eb2c4ed6824
SSDEEP

6144:kQ0fpRug1NzpAhY2Zgi1ny2YT2oqCesyq+V6pDDW3FdREH5gH+xWz1:kQ0Rsg58Yti9y2voyskVmO3BlH+W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Variant.Johnnie.255811.4892.11381

Files

SecuriteInfo.com.Variant.Johnnie.255811.4892.11381
.dll windows:5 windows x86 arch:x86

991df9a4e85f5c69b2489b1877be1c8a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetDateFormatW
CreateProcessW
QueryPerformanceCounter
GetModuleHandleW
GetTickCount
GetSystemTimeAsFileTime
OpenProcess
LoadLibraryW
Sleep
GetVersionExW
CreateFileW
GetStartupInfoW
GetLastError
GetCurrentDirectoryW
GetProcAddress
VirtualProtectEx
GetLocalTime
LockResource
CloseHandle
GetWindowsDirectoryW
DeleteFileW
GetSystemTime
GetVolumeInformationW
CreateFileA
SetStdHandle
SetFilePointer
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WideCharToMultiByte
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapFree
ExitProcess
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
GetCurrentProcessId
HeapAlloc
RaiseException
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
RtlUnwind
VirtualAlloc
HeapReAlloc
WriteFile
LoadLibraryA
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
FlushFileBuffers

user32

CloseClipboard
MapDialogRect
GetMessageW
SetCapture
LoadIconW
OffsetRect
EndDialog

Exports

Exports

Readyinclude
Spotlaugh

Sections

.text
Size: 256KB - Virtual size: 255KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 15.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

991df9a4e85f5c69b2489b1877be1c8a

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 256KB - Virtual size: 255KB

.rdata Size: 106KB - Virtual size: 105KB

.data Size: 19KB - Virtual size: 15.0MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 40KB - Virtual size: 39KB

.text
Size: 256KB - Virtual size: 255KB

.rdata
Size: 106KB - Virtual size: 105KB

.data
Size: 19KB - Virtual size: 15.0MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 40KB - Virtual size: 39KB