SecuriteInfo[.]com[.]Win32[.]BotX-gen[.]3892[.]8628[.]exe

General

Target
SecuriteInfo.com.Win32.BotX-gen.3892.8628.exe
Size 208KB
Sample240317-bxyrtsbc39
SHA256 81e2a48aed2eb0f524947c8c002f753c1c66583602cf505c7f3adac1aeff1df5
MD5 acbc25eea9ca672493f170df3a5c3226
SHA1 1965f36c094c8b0e73b549ad300d9dea4c55da04
SHA512 cef7605c8660ad61449f72b26302c73c55f29bfa0a4bb052b08e686a1654a965719196e5a51a108ed2db44e0269638b77e7c3836971d0a58b22509faed5aeab9
SSDEEP 3072:Z/+TvPLqni9+PLWKMDwd5fS/R27RPneWgX9w1RBeg8+/yG5V:l+TbajiKMDefteWgXkRBeA
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.BotX-gen.3892.8628.exe

File Explorer

SecuriteInfo.com.Win32.BotX-gen.3892.8628.exe

.exe 208KB

SecuriteInfo.com.Win32.BotX-gen.3892.8628.exe

IMPHASH 139fb810012bd1f8fb1fed972825a3ee
SHA256 81e2a48aed2eb0f524947c8c002f753c1c66583602cf505c7f3adac1aeff1df5
MD5 acbc25eea9ca672493f170df3a5c3226
SHA1 1965f36c094c8b0e73b549ad300d9dea4c55da04
SHA512 cef7605c8660ad61449f72b26302c73c55f29bfa0a4bb052b08e686a1654a965719196e5a51a108ed2db44e0269638b77e7c3836971d0a58b22509faed5aeab9
SSDEEP 3072:Z/+TvPLqni9+PLWKMDwd5fS/R27RPneWgX9w1RBeg8+/yG5V:l+TbajiKMDefteWgXkRBeA
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

4698

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapAlloc InterlockedIncrement SystemTimeToFileTime ReadConsoleOutputAttribute HeapFree SetComputerNameW GetTimeFormatA SetEvent GetNumaAvailableMemoryNode GlobalAlloc LoadLibraryW GetFileAttributesA LocalReAlloc GetAtomNameW GetModuleFileNameW MultiByteToWideChar GetLocaleInfoA CreateJobObjectA SetThreadLocale GetLastError HeapSize BuildCommDCBW UnhandledExceptionFilter FindAtomA CreatePipe VirtualProtect GetCurrentDirectoryA SetCalendarInfoA GetProfileSectionW HeapReAlloc FindNextVolumeMountPointW CreateFileA GetCommandLineA HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent GetProcAddress GetModuleHandleW ExitProcess DecodePointer WriteFile GetStdHandle HeapCreate EncodePointer GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage Sleep RtlUnwind LCMapStringW GetStringTypeW IsProcessorFeaturePresent

user32

GetMonitorInfoW

advapi32

OpenThreadToken

winhttp

WinHttpOpen

Sharing