SecuriteInfo[.]com[.]Win32[.]PWSX-gen[.]18615[.]2558[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.PWSX-gen.18615.2558.dll
Size

67KB
MD5

82569913e3e53cf0e963db0339ab9425
SHA1

f9ae7a58119b4a82aff1269c0f45161b66f2c889
SHA256

00e1c61baacdfb47c69fde83326ec911a70ccaf17c8f2a287c7a9f350216873c
SHA512

21dca83ebce15ff40ab4b04bf1b5027f3da3c6ea518bf4c0ffb442c3504fc4143693579c75f36ce5e7ec069af2354927cd9d902c29c1a12cff47557867d05655
SSDEEP

1536:tCjYt3iVIANv74ElFuqcIWc/8lPtqmq1uN6omUwFi:s6WZNcQFuEWc/8PtqENeUwFi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.PWSX-gen.18615.2558.dll

Files

SecuriteInfo.com.Win32.PWSX-gen.18615.2558.dll
.dll windows:6 windows x86 arch:x86

0a0563c3f9bdc532aa578f457b27651a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnumTimeFormatsW

mswsock

SetServiceA

mscms

GetCountColorProfileElements
SetColorProfileElementSize
GetColorProfileHeader

wsnmp32

ord105
ord501
ord502
ord904

user32

SetForegroundWindow
GetWindowLongW
GetDlgItemInt

loadperf

LoadPerfCounterTextStringsW
UnloadPerfCounterTextStringsA
LoadPerfCounterTextStringsA

wininet

DeleteUrlCacheGroup
GetUrlCacheEntryInfoA
IsHostInProxyBypassList

odbc32

PostComponentError
ord247
CollectODBCPerfData
ord265
ord271

comdlg32

GetSaveFileNameA
PrintDlgExW

Exports

Exports

rtrrtrtrtrt

Sections

.text
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ