rtrrtrtrtrt
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.PWSX-gen.29166.3784.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.PWSX-gen.29166.3784.dll
Resource
win10v2004-20240709-en
General
-
Target
SecuriteInfo.com.Win32.PWSX-gen.29166.3784.dll
-
Size
92KB
-
MD5
86b5bfc244086ed275577eef77d1a007
-
SHA1
841db06d74724c63ada2d9ae483d4d71be1be772
-
SHA256
346d1c560799972221b11393a59db7bc3ebd62d6b7bb87245abccc9c8128880d
-
SHA512
03f0f3964daf3a5adeda42ba15e4643ec27584507eda0d401c2229b384e99b7d99803d3e3bf3def4efab9ea90469d62e15aa9ed907a3f66b26e75d8a47a45cc5
-
SSDEEP
1536:eeukqM4dnhNShJ/icSo0m050xkDWHlafl88D5VR9qmvZgnxpnk0ImBUPRJ:7ujM8nn+iHRmkiHUfR5VRv6nrfImGPRJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Win32.PWSX-gen.29166.3784.dll
Files
-
SecuriteInfo.com.Win32.PWSX-gen.29166.3784.dll.dll windows:6 windows x86 arch:x86
0a0563c3f9bdc532aa578f457b27651a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
EnumTimeFormatsW
mswsock
SetServiceA
mscms
GetCountColorProfileElements
SetColorProfileElementSize
GetColorProfileHeader
wsnmp32
ord105
ord501
ord502
ord904
user32
SetForegroundWindow
GetWindowLongW
GetDlgItemInt
loadperf
LoadPerfCounterTextStringsW
UnloadPerfCounterTextStringsA
LoadPerfCounterTextStringsA
wininet
DeleteUrlCacheGroup
GetUrlCacheEntryInfoA
IsHostInProxyBypassList
odbc32
PostComponentError
ord247
CollectODBCPerfData
ord265
ord271
comdlg32
GetSaveFileNameA
PrintDlgExW
Exports
Exports
Sections
.text Size: 512B - Virtual size: 206B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ