SecuriteInfo[.]com[.]Win32[.]TrojanX-gen[.]21959[.]9760[.]exe

General

Target
SecuriteInfo.com.Win32.TrojanX-gen.21959.9760.exe
Size 294KB
Sample240203-1dletsafa6
SHA256 ea2b0ed5a75cbd3f49b420e553629ac08ea8bd673d5cacc8c004511b84f03d83
MD5 4547ce207c07da495d6c546f2e9197f3
SHA1 dbcc6433486045d8460fc883c87eaed49b58b638
SHA512 33a5bc106fcbfbe186165f2488e6dc6814345812d112a5056bf987a5eeb6d651cc760f278a671cfda9c158236a07d82ff4f8b822e9efbc44c94a7bb82af6897e
SSDEEP 6144:+W8pztQVn2NsRc3Ru03G7MCZ61U41UG591kqc:+BSVn2NEwoKGgCI1U4D9e5
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.TrojanX-gen.21959.9760.exe

File Explorer

SecuriteInfo.com.Win32.TrojanX-gen.21959.9760.exe

.exe 294KB

SecuriteInfo.com.Win32.TrojanX-gen.21959.9760.exe

IMPHASH e73d248f8b5138b09f44525633bf1f57
SHA256 ea2b0ed5a75cbd3f49b420e553629ac08ea8bd673d5cacc8c004511b84f03d83
MD5 4547ce207c07da495d6c546f2e9197f3
SHA1 dbcc6433486045d8460fc883c87eaed49b58b638
SHA512 33a5bc106fcbfbe186165f2488e6dc6814345812d112a5056bf987a5eeb6d651cc760f278a671cfda9c158236a07d82ff4f8b822e9efbc44c94a7bb82af6897e
SSDEEP 6144:+W8pztQVn2NsRc3Ru03G7MCZ61U41UG591kqc:+BSVn2NEwoKGgCI1U4D9e5
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

6234

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindResourceW HeapAlloc InterlockedIncrement OpenJobObjectA SetDefaultCommConfigW CreateDirectoryW GetTickCount GetProcessHeap GetConsoleAliasesLengthA TzSpecificLocalTimeToSystemTime GetSystemTimes WideCharToMultiByte GetVolumeInformationA LoadLibraryW GetAtomNameW CompareStringW GetStartupInfoW MoveFileExA FlushFileBuffers GetConsoleAliasesW GlobalUnfix SetCurrentDirectoryA GetLastError GetProcAddress CreateNamedPipeA ResetEvent OpenWaitableTimerA LoadLibraryA LocalAlloc FreeEnvironmentStringsW GetCurrentDirectoryA EndUpdateResourceA FileTimeToLocalFileTime IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetModuleHandleExA WritePrivateProfileStringW EnumDateFormatsExW HeapFree EncodePointer DecodePointer GetCommandLineW HeapSetInformation TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate HeapDestroy Sleep HeapSize GetModuleHandleW ExitProcess EnterCriticalSection LeaveCriticalSection CloseHandle WriteFile GetStdHandle GetModuleFileNameW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc FatalAppExitA SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetLocaleInfoW RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage SetStdHandle GetConsoleCP GetConsoleMode LCMapStringW MultiByteToWideChar GetStringTypeW SetFilePointer IsProcessorFeaturePresent WriteConsoleW CreateFileW GetUserDefaultLCID RaiseException

user32

DestroyIcon

advapi32

ReadEventLogA DuplicateToken GetServiceKeyNameA

Name

.text

Size

167KB

Virtual Size

167KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gucaj

Size

512B

Virtual Size

124B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.leri

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

99KB

Virtual Size

1.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

SecuriteInfo.com.Win32.TrojanX-gen.21959.9760.exe

kernel32

user32

advapi32

generic