SecuriteInfo[.]com[.]Win32[.]TrojanX-gen[.]29921[.]31134[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.TrojanX-gen.29921.31134.dll
Size

2.7MB
MD5

f2e9aae86303e4b531b1bacb9ef213bc
SHA1

0b6019c73f2e4a47786909b6529ab3851a776fc6
SHA256

a468d96bf44c356808efb963f206380081895bded622fc3db478a1ed7eb9f39b
SHA512

e35b6a9a96777807aa08697e1cf88d418e421bdeda947dd2026aa8169f5a2000e9b7a3f1a5d42042fbebc77a45565e7a198a63c366d99ce5fa297533563a6aed
SSDEEP

49152:aU+ThQY8b0W+FzBmWzK77f0c4kxgCF6ftdRvMNtyXh:a/2YM0Wk9b0LKkx361jEDyx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.TrojanX-gen.29921.31134.dll

Files

SecuriteInfo.com.Win32.TrojanX-gen.29921.31134.dll
.dll windows:5 windows x86 arch:x86

393bcc729bcf7fa621781e6e5d18d614

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

oleaut32

SafeArrayCreate

kernel32

GetStringTypeA
OutputDebugStringA
GetModuleHandleW
DebugBreak
GetModuleHandleA

mprapi

MprAdminBufferFree

user32

DestroyIcon
FlashWindowEx
EnableWindow
SetDlgItemTextA

msvcrt

memset

Exports

Exports

AwcdthodsHlu

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT
Size: 4KB - Virtual size: 102B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ