SecuriteInfo[.]com[.]Win64[.]TrojanX-gen[.]26315[.]28526[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win64.TrojanX-gen.26315.28526.exe
Size

1.7MB
MD5

f383249d076bc7609b2d9b3fbafdcc8a
SHA1

d121ba1602f0fe24c733667141837c9e2c3f15a5
SHA256

6783cc8e3840ddea06d2447115cf82d3006debee9e09df230864d0c6b2deea50
SHA512

3d2154ef9ecacad20541ff8e7a5280bef2eea52c1b2a98cb31d730bacc32315c76532d08f147b758a6450d139724f47615aaf92e51c9f270510ef09791b82d5d
SSDEEP

24576:bN4mWlshnOdToEv56hewf/tNomql0fQwee8Jmf0AUcKArVGlc:bbKx6hew8mql0fQbe8JmcAUcKMQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win64.TrojanX-gen.26315.28526.exe

Files

SecuriteInfo.com.Win64.TrojanX-gen.26315.28526.exe
.exe windows:6 windows x64 arch:x64

921a186b5d21ccebbb6ebf66ca7e93c6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

CreateFiberEx
CreateFiber
ConvertThreadToFiber
PulseEvent
GlobalDeleteAtom
InitAtomTable
DeleteAtom
SetHandleCount
SetMessageWaitingIndicator
ClearCommBreak
ClearCommError
EscapeCommFunction
GetCommMask
GetCommModemStatus
GetCommTimeouts
TransmitCommChar
PrepareTape
EraseTape
CreateTapePartition
GetTapeStatus
MulDiv
GetMailslotInfo
SetMailslotInfo
AddAtomW
GetNamedPipeHandleStateA
MapUserPhysicalPagesScatter
WriteConsoleW
CloseHandle
GetConsoleMode
GetConsoleOutputCP
HeapReAlloc
HeapSize
GetProcessHeap
LCMapStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetProcessIoCounters
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindClose
HeapFree
HeapAlloc
GetModuleHandleExW
TerminateProcess
GetCurrentProcess
WriteFile
RtlPcToFileHeader
RaiseException
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetLastError
RtlUnwindEx
GetModuleHandleW
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
GetProcessAffinityMask
LocalCompact
LocalShrink
LocalUnlock
GlobalUnWire
GlobalUnfix
GlobalCompact
GlobalUnlock
LockResource
GetModuleFileNameW
GetModuleFileNameA
FreeResource
DisableThreadLibraryCalls
SetInformationJobObject
AssignProcessToJobObject
IsProcessInJob
CreateMemoryResourceNotification
ResetWriteWatch
GetWriteWatch
SetProcessWorkingSetSize
FlushViewOfFile
CreateFileMappingW
SetSystemTimeAdjustment
GetNativeSystemInfo
GetVersion
GetThreadIOPendingFlag
SetProcessPriorityBoost
GetProcessPriorityBoost
GetProcessHandleCount
IsProcessorFeaturePresent
OpenProcess
GetThreadTimes
FlushInstructionCache
ConvertFiberToThread
GetThreadContext
GetProcessId
GetPriorityClass
SetPriorityClass
GetProcessVersion
GetThreadPriority
GetThreadPriorityBoost
GetCurrentThreadId
GetCurrentThread
ExitProcess
GetProcessTimes
CancelWaitableTimer
CreateEventW
CreateMutexW
WaitForSingleObject
ReleaseMutex
ReleaseSemaphore
ResetEvent
SetEvent
PostQueuedCompletionStatus
CreateIoCompletionPort
QueryPerformanceFrequency
QueryPerformanceCounter
GetNamedPipeHandleStateW
GetNamedPipeInfo
PeekNamedPipe
DisconnectNamedPipe
SetLastError
SetHandleInformation
DecodeSystemPointer
EncodeSystemPointer
DecodePointer
EncodePointer
SetFileValidData
SetFilePointerEx
SetFilePointer
GetFileTime
GetFileType
GetFileInformationByHandle
GetFileAttributesExW
FlushFileBuffers
FindNextChangeNotification
FindFirstFileExW
CreateFileW
SetStdHandle
GetStdHandle
HeapCreate
MultiByteToWideChar
WideCharToMultiByte

user32

GetComboBoxInfo
GetScrollBarInfo
GetCursorInfo
InternalGetWindowText
CascadeWindows
DrawIconEx
LookupIconIdFromDirectory
GetWindow
GetClassNameW
DeregisterShellHookWindow
GetShellWindow
SetProcessDefaultLayout
GetWindowLongW
SetRect
CreateDialogParamA
CharLowerBuffA
GetSystemMenu
GetMessageA
CheckMenuRadioItem
FillRect
SetSysColors
HideCaret
MessageBoxW
GetMenuContextHelpId
AdjustWindowRectEx
ScrollWindow
AllowSetForegroundWindow
GetQueueStatus
MapVirtualKeyExW
GetKeyboardType
SetKeyboardState
CharPrevExA
CharNextExA
CharToOemBuffW
UpdateLayeredWindow
WaitForInputIdle
AttachThreadInput
GetKeyboardLayout
ToUnicodeEx
EnableWindow
GetCursorPos
ChildWindowFromPoint
DefDlgProcA
InvalidateRect
InsertMenuItemA
FindWindowA
SetDlgItemInt
EnableMenuItem
GetSysColorBrush
PostQuitMessage
CheckDlgButton
KillTimer
DispatchMessageA
GetWindowRect
UnregisterClassA
GetDlgItem
GetClientRect
CheckMenuItem
RemoveMenu
AppendMenuA
CharUpperA
LoadIconA
DrawFrameControl
SetCursor
SetClipboardData
SendMessageA
SetDlgItemTextA
GetClassInfoA
SendDlgItemMessageA
GetClipboardData
TranslateMessage
SetFocus
DestroyMenu
RegisterClassA
IsDlgButtonChecked
EnumClipboardFormats
MoveWindow
GetSysColor
MessageBoxA
SetWindowTextA
wvsprintfA
SetWindowPlacement
GetWindowLongA
LoadAcceleratorsA
GetWindowTextA
EmptyClipboard
DestroyAcceleratorTable
CallWindowProcA
CloseClipboard
ClientToScreen
SetWindowLongA
IsMenu
SetMenuItemInfoA
IsDialogMessageA
DestroyIcon
RedrawWindow
SetTimer
GetDlgItemTextA
TranslateAcceleratorA
OpenClipboard
IsWindow
GetActiveWindow
GetSubMenu
wsprintfA
TrackPopupMenu
DestroyCursor
GetWindowPlacement
DialogBoxParamA
CreatePopupMenu
GetSystemMetrics
EndDialog
PostMessageA
SetActiveWindow
CheckRadioButton
SetWindowPos
DestroyWindow
LoadCursorA
GetMenu

gdi32

GetStockObject
SelectObject
GetEnhMetaFileDescriptionW
PolyPolyline
GetDIBColorTable
FlattenPath
PolyDraw
GetCurrentPositionEx
SetTextColor
TextOutW
ExtTextOutW
PolyBezierTo
SetViewportExtEx
SetWindowExtEx
SetBrushOrgEx
GdiGetBatchLimit
SetBkMode
CreateFontIndirectA
GetDCBrushColor
DeleteObject
GetObjectA
AnimatePalette
BitBlt
Ellipse
EnumFontFamiliesW
EnumObjects
GetBkColor
GetObjectW
GetDIBits
GetGraphicsMode
GetObjectType
GetPolyFillMode
GetTextCharacterExtra
GetTextExtentPointW
GetTextExtentExPointW
GetFontLanguageInfo
GetCharacterPlacementW
GetCharABCWidthsI
IntersectClipRect
PlgBlt
Pie
PaintRgn
PtInRegion
RectInRegion
SetDCPenColor
SetLayout
SetPolyFillMode
StrokePath
SetStretchBltMode
StretchBlt

winspool.drv

AbortPrinter
FindClosePrinterChangeNotification
ScheduleJob
WritePrinter

comdlg32

GetOpenFileNameW
PageSetupDlgW
PrintDlgExW
PrintDlgW
ReplaceTextW
FindTextW
ChooseColorW
GetFileTitleW
GetSaveFileNameW
GetOpenFileNameA
GetSaveFileNameA

advapi32

RegOpenKeyExA
AdjustTokenPrivileges
RegCloseKey
RegSetValueA
RegDeleteKeyA
RegQueryValueExA
LookupPrivilegeValueA
GetUserNameA
GetUserNameW
DecryptFileW
RegCreateKeyA
OpenProcessToken

comctl32

CreateToolbarEx
ImageList_Destroy
ImageList_Create
ImageList_SetBkColor
ImageList_ReplaceIcon
InitCommonControlsEx
ImageList_Remove

dxgi

CreateDXGIFactory

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 582KB - Virtual size: 581KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

921a186b5d21ccebbb6ebf66ca7e93c6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

comctl32

dxgi

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 48KB - Virtual size: 48KB

.data Size: 19KB - Virtual size: 28KB

.pdata Size: 4KB - Virtual size: 4KB

_RDATA Size: 512B - Virtual size: 500B

.rsrc Size: 582KB - Virtual size: 581KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 48KB - Virtual size: 48KB

.data
Size: 19KB - Virtual size: 28KB

.pdata
Size: 4KB - Virtual size: 4KB

_RDATA
Size: 512B - Virtual size: 500B

.rsrc
Size: 582KB - Virtual size: 581KB

.reloc
Size: 2KB - Virtual size: 1KB