SecuriteInfo[.]com[.]Win32[.]TrojanX-gen[.]16701[.]4283[.]dll | Triage

Sharing

General

Target

SecuriteInfo.com.Win32.TrojanX-gen.16701.4283.dll
Size

2.7MB
MD5

37d1ed7b2fa55cace1bc73f16bd08361
SHA1

2de04924368306b6fde8925a0699b4b8392356c0
SHA256

6bb6c97972905e08e7a41e500470a0ae777821605e135f48ec3465a4bcda1c42
SHA512

fbed8609065f17e04b7741f18c9f8120c7abc1c68cec6e2b1c6f067abde5450f932e5ba5d857fa83b164f262d7f4b901f1d7810a4e554515660c469ff3290db1
SSDEEP

49152:Qqet/FvPqdNY3R5ZOunI3InNZ2UzkkL8W7fMm1azvAfu/kw3:udXWwZOuI3CNYUzkkwM/aziu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.TrojanX-gen.16701.4283.dll

Files

SecuriteInfo.com.Win32.TrojanX-gen.16701.4283.dll
.dll windows:5 windows x86 arch:x86

fb0f61e9eed2a57ddb7bb98a74d4480c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mprapi

MprAdminBufferFree

kernel32

DebugBreak
GetStringTypeA
GetModuleHandleW
OutputDebugStringA
GetModuleHandleA

msvcrt

memset

user32

DestroyIcon
FlashWindowEx
EnableWindow
SetDlgItemTextA

oleaut32

SafeArrayCreate

Exports

Exports

AwcdthodsHlu

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT
Size: 4KB - Virtual size: 86B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ