SecuriteInfo[.]com[.]Win32[.]BootkitX-gen[.]7605[.]8583[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Win32.BootkitX-gen.7605.8583.exe
Size 806KB
Sample240701-vwegcazemd
SHA256 d47e05b0ad27c651fb9cf73444e1f6a26514acb16998e92fca8be115ae6a2dee
MD5 88932ab33c38072946abc06b426d33b8
SHA1 accc6e0ba8e1e7250e2634a1f0e7f06be7f4beb2
SHA512 266beae33826041ee77d36f57b41ec4ffe9849faa6b40c4446e531685e30c317c3b282e4079b674a7f37ee79dafe92c41e5b0104e210703f4ca69f7013c9e4d7
SSDEEP 12288:qIowhzaoWcGawk7yVe+H1JU7VuzpzS3oxAiXZcmQGLu5t15KBM0JiY3u3SZtr9XW:vhzL5MkmQ+H/2KFXVotzeM03aSpyr
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.BootkitX-gen.7605.8583.exe

File Explorer

SecuriteInfo.com.Win32.BootkitX-gen.7605.8583.exe

.exe 806KB

SecuriteInfo.com.Win32.BootkitX-gen.7605.8583.exe

IMPHASH 9ab579f0940038199ed136d401eb2211
SHA256 d47e05b0ad27c651fb9cf73444e1f6a26514acb16998e92fca8be115ae6a2dee
MD5 88932ab33c38072946abc06b426d33b8
SHA1 accc6e0ba8e1e7250e2634a1f0e7f06be7f4beb2
SHA512 266beae33826041ee77d36f57b41ec4ffe9849faa6b40c4446e531685e30c317c3b282e4079b674a7f37ee79dafe92c41e5b0104e210703f4ca69f7013c9e4d7
SSDEEP 12288:qIowhzaoWcGawk7yVe+H1JU7VuzpzS3oxAiXZcmQGLu5t15KBM0JiY3u3SZtr9XW:vhzL5MkmQ+H/2KFXVotzeM03aSpyr
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6736

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetVolumeMountPointW GetComputerNameW SetCommBreak SleepEx GetCommProperties GetModuleHandleW GetTickCount EnumCalendarInfoExW GlobalAlloc GetConsoleAliasExesLengthW WriteConsoleOutputA lstrcpynW GetModuleFileNameW GetConsoleAliasesW CreateJobObjectW GetProcAddress LoadLibraryA WriteConsoleA UnhandledExceptionFilter InterlockedExchangeAdd LocalAlloc AddAtomW AddAtomA FoldStringA lstrcatW GetConsoleTitleW BuildCommDCBA FindFirstVolumeW AreFileApisANSI ZombifyActCtx GetLogicalDriveStringsW GetLastError OpenJobObjectA CreateFileA WriteConsoleW MultiByteToWideChar HeapAlloc HeapReAlloc GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA HeapSize FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount RtlUnwind ReadFile GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer SetStdHandle CloseHandle GetConsoleOutputCP

gdi32

GetCharWidth32W

advapi32

EnumDependentServicesW

ole32

CoTaskMemAlloc

winhttp

WinHttpAddRequestHeaders