SecuriteInfo[.]com[.]Win32[.]PWSX-gen[.]24442[.]12778[.]exe

General

Target
SecuriteInfo.com.Win32.PWSX-gen.24442.12778.exe
Size 4.0MB
Sample240220-qjcprshd79
SHA256 c6c0b46b99ca7a4e1bc4d7969fc055721c1f3be10b618db6b1427f1e6b8f65be
MD5 b0605dffe292efe0cac93f48fbb059a8
SHA1 f6d95b0df8c8dbe10f0d555d756defaa2663e7ed
SHA512 c2d47c37ee7919cdb4d43e92bafbd8ac2759bc0e82d0c8883ddbe5d6ec577313f037a7ca2d0577b58d7f365695be482f14ffdd0b84bffffb5013c38cfb9a484f
SSDEEP 98304:ZFMj/+GKrWC3yhAsY3gQncXM8peGJvFBznc/btBW:ZFMaGKr9ihsF8M8peGhjzncZc
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

SecuriteInfo.com.Win32.PWSX-gen.24442.12778.exe

.exe 4.0MB

SecuriteInfo.com.Win32.PWSX-gen.24442.12778.exe

IMPHASH f48274c59c4ca4043928b4b5fea130b7
SHA256 c6c0b46b99ca7a4e1bc4d7969fc055721c1f3be10b618db6b1427f1e6b8f65be
MD5 b0605dffe292efe0cac93f48fbb059a8
SHA1 f6d95b0df8c8dbe10f0d555d756defaa2663e7ed
SHA512 c2d47c37ee7919cdb4d43e92bafbd8ac2759bc0e82d0c8883ddbe5d6ec577313f037a7ca2d0577b58d7f365695be482f14ffdd0b84bffffb5013c38cfb9a484f
SSDEEP 98304:ZFMj/+GKrWC3yhAsY3gQncXM8peGJvFBznc/btBW:ZFMaGKr9ihsF8M8peGhjzncZc
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

48:f8:fb:e5:70:25:ee:48:cb:0a:1f:b9:d5:f5:f1:95:fc:40:2d:3a:c9:e8:2a:f1:8d:cd:08:3b:40:58:1b:fc

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=525c3d3f1b06302b310410391d3f23471542520105293b2253150610173842041410,POSTALCODE=10820,ST=0b1c1115005f5c4e111608130d1716070407125b0c1704+ST=0b1c1115494a5c024150110d05170e09031e0a1f1a0150025113451d111807075354195315000e091843540114031f0f4053060e0414150c0210571f0a0a055b0c0b0a070b

Chains

Feb 15, 2024

Minor OS version

1

Major OS version

5

Entry point

5265

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLCID GetConsoleAliasesLengthA TzSpecificLocalTimeToSystemTime GetProcessTimes GetVolumeInformationA LoadLibraryW GetLocaleInfoW ReplaceFileW FlushFileBuffers CreateDirectoryA GetConsoleAliasesW GetCurrentDirectoryW ChangeTimerQueueTimer SetLastError GetProcAddress HeapAlloc SetStdHandle ResetEvent LoadLibraryA LocalAlloc SetConsoleOutputCP AddAtomA lstrcatW EraseTape VirtualProtect EnumDateFormatsW FatalAppExitA LocalSize FileTimeToLocalFileTime WriteConsoleW CloseHandle WriteConsoleOutputCharacterW CreateNamedPipeA GetComputerNameA IsProcessorFeaturePresent SetFilePointer EncodePointer DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameW HeapCreate Sleep HeapSize EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetLastError InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc RtlUnwind HeapFree WideCharToMultiByte LCMapStringW MultiByteToWideChar GetStringTypeW GetConsoleCP GetConsoleMode CreateFileW

user32

GetClassLongA

advapi32

OpenThreadToken QueryServiceLockStatusW

ole32

CreateDataAdviseHolder

Sharing