SecuriteInfo[.]com[.]Win32[.]PWSX-gen[.]23907[.]14157[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.PWSX-gen.23907.14157.dll
Size

40KB
MD5

f2e04c1e676272f0c3a9c5c6e0ae57b0
SHA1

0f8f084aeb714a3d55afe38394e29085fa97aaca
SHA256

49c860cfd01c28c4542564fde6860cd1c7e5bd1e23cf40d3953e8a6dbd6d78e4
SHA512

d24bb2deb6d23104a30fd8b6c4137a1ec8892ed390a9936c373cbf5faef328edaa0fca586a0637258c284bb0332de250cdf996cf6e10613786bb8e04e9143c21
SSDEEP

768:gR9VlSQZwjXIJW+Cwgf+D54bmievOIFl8zizwPWQD5RK/j:g7VD0IJWdf/evOIeizwOQy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.PWSX-gen.23907.14157.dll

Files

SecuriteInfo.com.Win32.PWSX-gen.23907.14157.dll
.dll windows:6 windows x86 arch:x86

0a0563c3f9bdc532aa578f457b27651a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnumTimeFormatsW

mswsock

SetServiceA

mscms

GetCountColorProfileElements
SetColorProfileElementSize
GetColorProfileHeader

wsnmp32

ord105
ord501
ord502
ord904

user32

SetForegroundWindow
GetWindowLongW
GetDlgItemInt

loadperf

LoadPerfCounterTextStringsW
UnloadPerfCounterTextStringsA
LoadPerfCounterTextStringsA

wininet

DeleteUrlCacheGroup
GetUrlCacheEntryInfoA
IsHostInProxyBypassList

odbc32

PostComponentError
ord247
CollectODBCPerfData
ord265
ord271

comdlg32

GetSaveFileNameA
PrintDlgExW

Exports

Exports

rtrrtrtrtrt

Sections

.text
Size: 512B - Virtual size: 205B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ