SecuriteInfo[.]com[.]Win32[.]PWSX-gen[.]11658[.]447[.]dll | Triage

Sharing

General

Target

SecuriteInfo.com.Win32.PWSX-gen.11658.447.dll
Size

40KB
MD5

223c1b972b0505963d7c89f434e8b718
SHA1

51c1e78783beb7333a88be9ec697f14686138fdc
SHA256

f918bbeed1ed9881c45e441cabb2e4fefb5bef229d0a9f6dda0c50e07afb5b7a
SHA512

5e573c6ac478f0d7b7f005116eda3f917d82d5c5a6f52665bd5c0fda56563d191a59a785ea14cf1da85da43f8e7cba1900e84f10e0d32cdaca4ec15b2748e0c7
SSDEEP

768:GfteiQ/gGb3AuLHsY9lT7OziHbD1xN5zu/psOG6eUGUwD:GfteiQ/zsuLM4lT7Ozi1IBDv8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.PWSX-gen.11658.447.dll

Files

SecuriteInfo.com.Win32.PWSX-gen.11658.447.dll
.dll windows:6 windows x86 arch:x86

2e9a2bf98cef7e6675a49f4836973faa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnumTimeFormatsA

comdlg32

PrintDlgExA
PrintDlgExW
GetOpenFileNameW
ChooseColorW
FindTextA

loadperf

UnloadPerfCounterTextStringsW
UnloadPerfCounterTextStringsA

wininet

InternetCloseHandle
InternetSetOptionExW
ParseX509EncodedCertificateForListBoxEntry
InternetConnectA
InternetUnlockRequestFile

user32

InSendMessageEx
EnumPropsA
MonitorFromRect
GetMenuDefaultItem
IsWindow

winmm

waveInUnprepareHeader
mmioSeek
mixerMessage
waveInPrepareHeader
mmioInstallIOProcA

mswsock

GetNameByTypeW
rexec
EnumProtocolsW
GetAddressByNameA

Exports

Exports

rtrrtrtrtrt

Sections

.text
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ