SecuriteInfo[.]com[.]Win32[.]PWSX-gen[.]22673[.]22428 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.PWSX-gen.22673.22428
Size

71KB
MD5

6f0bde4c21a7bd022fb0cb4b3dcab335
SHA1

36f30f1f9e9a727a28f54cc7018402312d55d78d
SHA256

8ca7b1fbbe52a783c502350d94724af54c9b82075ba4d53a30b62d42341d27c2
SHA512

0ea6f0a8b5b64d66f0351b6ab285a0b6ec7adbed7aca23634780bcf4d6f8534353714921e83435c94ef80ec65bfd5bcce6894998cb8e01e251348b6c99d4cd2b
SSDEEP

1536:cVz+sRuxR4GEsD6LLaoVuWTSXQU/onLXBYxv6/:CrglbDbFDQBKa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.PWSX-gen.22673.22428

Files

SecuriteInfo.com.Win32.PWSX-gen.22673.22428
.dll windows:6 windows x86 arch:x86

0a0563c3f9bdc532aa578f457b27651a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnumTimeFormatsW

mswsock

SetServiceA

mscms

GetCountColorProfileElements
SetColorProfileElementSize
GetColorProfileHeader

wsnmp32

ord105
ord501
ord502
ord904

user32

SetForegroundWindow
GetWindowLongW
GetDlgItemInt

loadperf

LoadPerfCounterTextStringsW
UnloadPerfCounterTextStringsA
LoadPerfCounterTextStringsA

wininet

DeleteUrlCacheGroup
GetUrlCacheEntryInfoA
IsHostInProxyBypassList

odbc32

PostComponentError
ord247
CollectODBCPerfData
ord265
ord271

comdlg32

GetSaveFileNameA
PrintDlgExW

Exports

Exports

rtrrtrtrtrt

Sections

.text
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ