SecuriteInfo[.]com[.]Win32[.]Malware-gen[.]11524[.]25894[.]exe

resource
SecuriteInfo.com.Win32.Malware-gen.11524.25894.exe

SecuriteInfo.com.Win32.Malware-gen.11524.25894.exe

IMPHASH be41bf7b8cc010b614bd36bbca606973
SHA256 931a185152c1d316cd2b65998aee88d4f64f4acbe59df3efabb0ff968fa6c993
MD5 0e43108aac7bb6e9f68d769b746fea16
SHA1 751e7fe585e73d5ab80f5f629c94c170484c12f5
SHA512 faca3f1d87a4bdbacc0396544818a27925800b95e298185eb8ae3580d79f02a7eee7f02564181f453bdb56197539a3659526e1f00881ac0779301d7dbdd60c27
SSDEEP 24576:D9e1IHkIpNfvY092Y1f9t2JZVJ+TJV8felYpYtx8zkUa:DUmHpBNv9UJZVJ+TJVuiMa
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

14489

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileTime CompareFileTime SearchPathW GetShortPathNameW GetFullPathNameW MoveFileW SetCurrentDirectoryW GetFileAttributesW GetLastError CreateDirectoryW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW ExitProcess GetWindowsDirectoryW GetTempPathW GetCommandLineW SetErrorMode lstrcpynA CloseHandle lstrcpynW GetDiskFreeSpaceW GlobalUnlock GlobalLock CreateThread LoadLibraryW CreateProcessW lstrcmpiA CreateFileW GetTempFileNameW lstrcatW GetProcAddress LoadLibraryA GetModuleHandleA OpenProcess lstrcpyW GetVersionExW GetSystemDirectoryW GetVersion lstrcpyA RemoveDirectoryW lstrcmpA lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalAlloc WaitForSingleObject GetExitCodeProcess GlobalFree GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW WideCharToMultiByte lstrlenA MulDiv WriteFile ReadFile MultiByteToWideChar SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW lstrlenW

user32

GetAsyncKeyState IsDlgButtonChecked ScreenToClient GetMessagePos CallWindowProcW IsWindowVisible LoadBitmapW CloseClipboard SetClipboardData EmptyClipboard OpenClipboard TrackPopupMenu GetWindowRect AppendMenuW CreatePopupMenu GetSystemMetrics EndDialog EnableMenuItem GetSystemMenu SetClassLongW IsWindowEnabled SetWindowPos DialogBoxParamW CheckDlgButton CreateWindowExW SystemParametersInfoW RegisterClassW SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharNextA CharUpperW CharPrevW wvsprintfW DispatchMessageW PeekMessageW wsprintfA DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW LoadCursorW SetCursor GetWindowLongW GetSysColor CharNextW GetClassInfoW ExitWindowsEx IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint FindWindowExW

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor SelectObject

shell32

SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW ShellExecuteW SHFileOperationW SHGetSpecialFolderLocation

advapi32

RegEnumKeyW RegOpenKeyExW RegCloseKey RegDeleteKeyW RegDeleteValueW RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumValueW

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

Name

.text

Size

28KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

3.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ndata

Size

Virtual Size

516KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

296KB

Virtual Size

296KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$TEMP/Cool

SHA256 514774d8e62dc37f281992338612463068808ed5a466dc1b0c7c242b31f48389
MD5 ffa1c079c2f4c6fe1748c9705fbc0fda
SHA1 f701e6edc65bb7de8158b57861b03014bc1c65b9
SHA512 babb4b4fee2d4444e96f634c713de43ba0490e759e003497723293b54235fdc06a3fd60dc200bf708ad4fcf397a3e5338ddad6dd8154c9f46f64f6a805d1e800
SSDEEP 1536:uRHPDTxV/7k4f7cnl8iVrfjwDPaK0PrdrsCxX3aOAM2:uZPvxZ7LTcnlnVrrw+dPrdgCxXKOAM2
MD5 SHA1 SHA512 SSDEEP

$TEMP/Grow

SHA256 555da9eb7911ddc494fed580e6ea21988b13e917f76206e00707176797db190b
MD5 3c9f8ff4a787de0add5ea18b3c90aeec
SHA1 906ebcd1a5b5b34169b3312c57b478b7eb2acfa9
SHA512 f321713b684334a6ee674680bda1cb45b82c9a2385ce0257f44823d7acedb9390638dc267dc55fa73647b074ee7d7c062c98284b90d9ae9aad9128bb0a303765
MD5 SHA1 SHA512

ShakiraPen/Attacked

SHA256 9b49261b378ff83d4deba60b2340d42f374cde941167951600029d9083ba48e7
MD5 6ef8c1c2b28c05eaeac6e46b3040e369
SHA1 e95b0727b83d7093562ed5605cec43a4ef999d55
SHA512 9a125ab0f47d9637542d1ec582ede4b0acf547e31756d0989e91fc8b638e37611d8dd6f01c6a11f209ee77a11f2a928163fe7b6a8f28b86d0b79cfe913fa505d
SSDEEP 384:XPSOm/CJxdsim83f0fwY+FuW5+WScVpl5y3Eisvl552+oXfhDSckQJm8WyI+6WGl:XpcExdsiB3atiug+WScrl5y3Ehl552+t
MD5 SHA1 SHA512 SSDEEP

ShakiraPen/Essays

SHA256 36bbde273aee8421edb18b4f2017146118307ba7dd3694b6d55f64bd159c3ded
MD5 150f4653b13b6c4d0b8b72770c682969
SHA1 b62372a844d67e89e7a335bb3791fb7ec4b38321
SHA512 ccf3695445a4fde30edbe4210ceb594d1016a3bf154ba43222ce2d42d5e24357a094c0896faad6a933c7047b764345e0748489f7ad1ec9f58e95555dc3153dc5
SSDEEP 1536:IeWS0uEMkBNfRjj+oY3cwbf2yNXGI883mQb175/LUQOYaGrrcjXRdX:sS0hMkBNfNioYMcfFN38BsvL8rXP
MD5 SHA1 SHA512 SSDEEP

ShakiraPen/Itunes

SHA256 58af08c2703bf98461f3acf686b52d34d7c63e6665982eaee6f2be2f32f3a76a
MD5 694d11c39dab9971a8e33c9a2fbb8c54
SHA1 1ab6a65b43de72bd706c4c2b1baabcc03c2e20f3
SHA512 ed0789ba83fb053241838abfece5b30389e339d11121e37754a0ca2bb4d8c04152e37b805fc814f17b605e6abed0b4b71b35387d345cac7de93ddba4a213929c
SSDEEP 768:p/DPPLj1NXsuE+BshBzu8WznHX9meTFCgk9/pL:p/ku0qbz39mAggAL
MD5 SHA1 SHA512 SSDEEP

ShakiraPen/Officer

SHA256 94a1ee3ff9882414c621b0bf21b74744bbd69461e55d7a3479c0e75801167aca
MD5 b2d7b245eb933bb0a5fe20daa25cbff9
SHA1 ad52775da728362183fc18991db143903d1118a9
SHA512 ff51ec8ec382e25e0946281bde452e27d510723b66d378a54623597255f89aee5014c2ee8885c832bb9449e4b3c51565764b80d2b8782fe62fee108f605ea859
SSDEEP 1536:dJ73HU0QfF7DSJiz2oDEh1RxO3R4dsmm+1qJS7:z3HIt7DSJyQg0QS7
MD5 SHA1 SHA512 SSDEEP

ShakiraPen/Prompt

SHA256 e731b0ed7a9b1ea844b0f7aca3f27982213b6e8a6dc6512c0aaec3b8dece079d
MD5 e3d1a8c190d473c37be04f3e883c5bd5
SHA1 817fffb89d3835977921fa827cf407f901475b6d
SHA512 4d86b387b75792f2168a4d51750ca41a71674e5ec25a7e09826f0b74eeb13e9ffdb49aab632a8aa7e10678494881aa8d39b9e89c988971cd9260e6c06c316360
SSDEEP 1536:wW4cE4iHKftBzZa0WPUYPqs8gMqim/YZMV3PMt7i9UoxPnMFF+rQyGUz:r40NBzZLWPUYPp8L1mQO+tWmoZMx0
MD5 SHA1 SHA512 SSDEEP

ShakiraPen/Titled

SHA256 4f9208638d6a49b70e5192c525792edcdb1bb06ab403cdc5b93a357b5ba3bee2
MD5 acf1ef48885709dbc83533ee0425c52f
SHA1 d0ef7d02f7610a7e0121bc80b828158e18cd2f65
SHA512 2de5ab5f7e71dd12973040ae6f3a53df71fc746ce4874d41fd8123be3fe24c0f9fa8444b07f89b03d4132ac14c40891e3b84885d62278bce62b2b0db0b0cd7bb
SSDEEP 12288:VpV0etV7qtINsegA/rMyyzlcqakvAfcN9b2MyZa31tqoPTdFbgawV2501:VTxz1JMyyzlohMf1tN70aw8501
MD5 SHA1 SHA512 SSDEEP

Sharing

General

Malware Config

Signatures

File Explorer

SecuriteInfo.com.Win32.Malware-gen.11524.25894.exe

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

generic

$TEMP/Cool

$TEMP/Grow

ShakiraPen/Attacked

ShakiraPen/Essays

ShakiraPen/Itunes

ShakiraPen/Officer

ShakiraPen/Prompt

ShakiraPen/Titled