SecuriteInfo[.]com[.]Win32[.]PWSX-gen[.]26338[.]24235[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.PWSX-gen.26338.24235.dll
Size

69KB
MD5

3da38a1319b92d2df73edc49645a9157
SHA1

12f23af29042aa8ca43e7df8b54e024453fd850d
SHA256

45cea3d3e092205958708d6897da4decbcf6801723e24eae34532859878ddc58
SHA512

6286ddf08bccce1f184f57e4adc6794608adcbf14f5a27ddec86b3efecbd4a3d86d879de49f1f223940fb3ea946a4e89f35e950fce39204398c509602652633e
SSDEEP

1536:rRtYRMGfsdSx0wAehPRdTOR2LtAFRo1nHeJsUkTpSWn4b:w/EY/AehPRcR2LG7oVEVW4b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.PWSX-gen.26338.24235.dll

Files

SecuriteInfo.com.Win32.PWSX-gen.26338.24235.dll
.dll windows:6 windows x86 arch:x86

0a0563c3f9bdc532aa578f457b27651a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnumTimeFormatsW

mswsock

SetServiceA

mscms

GetCountColorProfileElements
SetColorProfileElementSize
GetColorProfileHeader

wsnmp32

ord105
ord501
ord502
ord904

user32

SetForegroundWindow
GetWindowLongW
GetDlgItemInt

loadperf

LoadPerfCounterTextStringsW
UnloadPerfCounterTextStringsA
LoadPerfCounterTextStringsA

wininet

DeleteUrlCacheGroup
GetUrlCacheEntryInfoA
IsHostInProxyBypassList

odbc32

PostComponentError
ord247
CollectODBCPerfData
ord265
ord271

comdlg32

GetSaveFileNameA
PrintDlgExW

Exports

Exports

rtrrtrtrtrt

Sections

.text
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ