SecuriteInfo[.]com[.]Win32[.]BotX-gen[.]15571[.]29489[.]exe

General

Target
SecuriteInfo.com.Win32.BotX-gen.15571.29489.exe
Size 359KB
Sample240924-y6pa3stdln
SHA256 ae3ae0f5f9d8e2911a2e7feecf26e9567ca3f4fe8a9b6c9d7f350c2db6e6e1eb
MD5 e2b0e31c9c976c6e6abbe7d82ea6c629
SHA1 872b2f5e29480c4a779d7a098279582766b08d29
SHA512 ba2772cb186dff10689b8398ffece622e387beeb9029d2d92c79e98f0671afb5a455952335d66fb9f14100e9611e1b7f728a91201ba4345d184dc0868961abd0
SSDEEP 6144:sLU7fB5Yy7d6fEM9GAtYEgw+0HEVlzIhsPFYc5PR:s47nPd6v9taEj+0kVlzIGNR
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.BotX-gen.15571.29489.exe

File Explorer

SecuriteInfo.com.Win32.BotX-gen.15571.29489.exe

.exe 359KB

SecuriteInfo.com.Win32.BotX-gen.15571.29489.exe

IMPHASH f191e24764ac2972e2c40e13c71b6d0d
SHA256 ae3ae0f5f9d8e2911a2e7feecf26e9567ca3f4fe8a9b6c9d7f350c2db6e6e1eb
MD5 e2b0e31c9c976c6e6abbe7d82ea6c629
SHA1 872b2f5e29480c4a779d7a098279582766b08d29
SHA512 ba2772cb186dff10689b8398ffece622e387beeb9029d2d92c79e98f0671afb5a455952335d66fb9f14100e9611e1b7f728a91201ba4345d184dc0868961abd0
SSDEEP 6144:sLU7fB5Yy7d6fEM9GAtYEgw+0HEVlzIhsPFYc5PR:s47nPd6v9taEj+0kVlzIGNR
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6174

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FillConsoleOutputCharacterA GetConsoleAliasExesLengthA OpenJobObjectA QueryDosDeviceA GetComputerNameW SleepEx FreeEnvironmentStringsA GetModuleHandleW GetConsoleAliasesLengthA ReadConsoleOutputA GetPriorityClass GetEnvironmentStrings FatalAppExitW SetSystemTimeAdjustment HeapCreate SetConsoleMode GetFileAttributesW GetModuleFileNameW GetBinaryTypeW SetConsoleTitleA GetShortPathNameA GetStdHandle GetLastError GetProcAddress SearchPathA GetCommandLineW OpenWaitableTimerA LoadLibraryA InterlockedExchangeAdd LocalAlloc MoveFileA SetCommMask FindAtomA FoldStringA WaitForMultipleObjects CreatePipe GetDefaultCommConfigA GetModuleHandleA FreeEnvironmentStringsW BuildCommDCBA PurgeComm WaitForDebugEvent SetCalendarInfoA GlobalReAlloc CopyFileExA GetVolumeInformationW CreateFileA GetNumaHighestNodeNumber DebugActiveProcess HeapFree Sleep ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapAlloc VirtualAlloc HeapReAlloc SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar ReadFile GetLocaleInfoA WideCharToMultiByte LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer SetStdHandle CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

GetUserObjectInformationW SetFocus

advapi32

ObjectPrivilegeAuditAlarmA

Sharing