Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.DropperX-gen.25885.2647.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.DropperX-gen.25885.2647.dll
Resource
win10v2004-20240704-en
General
-
Target
SecuriteInfo.com.Win32.DropperX-gen.25885.2647.dll
-
Size
2.5MB
-
MD5
fa6fbb9de26f4ade1eeb87d74170389d
-
SHA1
7ad1d8a35bd02472fd742d7d6be09654e8af2725
-
SHA256
4ba2a48ab55f6d82544024f7b0d4854a0b01c86b4eaf0a8a521b97390ed4b7d4
-
SHA512
08fdc72e52b7eb25d43e0b9cb4d033f44906e9f2d16c82a6080b903a9b32231ddc85d2f2882dac38b7bd9c0d0ca4156c6e556f71619c6844eed27918f1f10918
-
SSDEEP
49152:Q3ns9YTAjiBid2wDh0Isrx/HehefSxX/qkslcjEvT0n9:qfTciB+2wDhardeQqMksJb09
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Win32.DropperX-gen.25885.2647.dll
Files
-
SecuriteInfo.com.Win32.DropperX-gen.25885.2647.dll.dll windows:5 windows x86 arch:x86
08b0e89f513b9808ba656ef03cf23f6d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
CryptDestroyKey
DeleteService
version
VerQueryValueA
user32
ToAsciiEx
SetMenu
ShowCaret
LoadAcceleratorsW
UnregisterHotKey
gdi32
FillPath
GetNearestColor
GetMetaFileA
msvcrt
memset
kernel32
GetSystemInfo
DebugActiveProcess
GlobalDeleteAtom
GetConsoleCP
SetCommConfig
SetThreadPriority
GetBinaryTypeA
GetModuleFileNameA
LoadLibraryW
GetSystemTimeAsFileTime
OutputDebugStringA
LoadLibraryExA
LoadLibraryExW
winmm
waveInGetDevCapsA
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qdata Size: 344KB - Virtual size: 341KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dJikU40 Size: 276KB - Virtual size: 275KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
XJv48hjo Size: 432KB - Virtual size: 431KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 21KB
IMAGE_SCN_MEM_READ
.reloc Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ