SecuriteInfo[.]com[.]Trojan[.]Crypt[.]30410[.]30687

Sharing

Copy URL

Twitter E-mail

General

Target

SecuriteInfo.com.Trojan.Crypt.30410.30687
Size

312KB
MD5

5f9f67e8a5e92865ca222fa3d5b81739
SHA1

9d63ff86dbb8f7c4816fb43af94033a554471f02
SHA256

2f6eb2ed18afd3a7ba3f9014915d0a7cf49dd19ea60cb2b47164437b8298cf57
SHA512

b1f08b39357d50e7bd1ae1a920e04a66fb514a190c1d9554dd386ced90c9e6521bb0f4eacc690587cb11afebde26d4f4d2f21c055808b63db6fb1b309097a130
SSDEEP

6144:e2Flp1yuUXzbsMBAYmizIom9Bcr2Z/ZesJY/4crf:e27p1CoM+YOomk4BJY/Lrf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.Crypt.30410.30687

Files

SecuriteInfo.com.Trojan.Crypt.30410.30687
.exe windows:5 windows x86 arch:x86

7d36fbad78639283e6ac134cfe3e0660

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\source\VinylStudio\V13_15\Installer\Release\VSInstall_Exe.pdb

Imports

comctl32

ImageList_Destroy
ImageList_GetIconSize
ImageList_Add
ImageList_Draw
ImageList_Create
InitCommonControlsEx

gdiplus

GdipCloneBrush
GdipFree
GdipAlloc
GdipDeleteBrush
GdipDrawImageRectI
GdipFillRectangleI
GdipSetInterpolationMode
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCloneBitmapAreaI
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageDimension
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdipLoadImageFromFileICM
GdipLoadImageFromStreamICM
GdipLoadImageFromFile
GdipLoadImageFromStream
GdipFillPolygon
GdipSetPixelOffsetMode
GdipSetSmoothingMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipCreateSolidFill

msimg32

TransparentBlt
GradientFill

kernel32

LeaveCriticalSection
Sleep
CloseHandle
FormatMessageW
lstrcmpiW
GetVersionExW
MultiByteToWideChar
WideCharToMultiByte
CompareStringW
InterlockedIncrement
DeleteCriticalSection
SetEvent
LockResource
GetCurrentProcessId
LoadResource
SizeofResource
GetTickCount
FindResourceW
InterlockedDecrement
GetModuleFileNameW
FoldStringW
FreeLibrary
CreateFileW
InitializeCriticalSection
HeapAlloc
HeapFree
GetACP
ExitProcess
WriteFile
GetStdHandle
HeapSize
GetModuleHandleExW
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
EncodePointer
RtlUnwind
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LoadLibraryExA
VirtualQuery
VirtualProtect
GetSystemInfo
RaiseException
SetLastError
GetLastError
GetCurrentThreadId
GetShortPathNameW
LocalFree
EnterCriticalSection
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetModuleHandleW
GetProcAddress
LoadLibraryW
GetCurrentProcess
TerminateProcess
HeapReAlloc
LCMapStringW
GetFileType
ReadFile
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetStringTypeW
GetProcessHeap
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
DecodePointer
SetStdHandle
FlushFileBuffers
GetConsoleCP
WriteConsoleW
SetEndOfFile

user32

SetDlgItemTextW
ReleaseDC
BeginPaint
GetWindowTextLengthW
LoadBitmapW
MonitorFromWindow
DrawFocusRect
DrawFrameControl
MapDialogRect
IsDialogMessageW
GetIconInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetClassNameW
EnumChildWindows
SetParent
GetClassLongW
OffsetRect
IntersectRect
WindowFromPoint
GetCursor
RedrawWindow
ValidateRect
GetWindowRgn
GetForegroundWindow
IsZoomed
GetSystemMetrics
KillTimer
SetTimer
EndDialog
DialogBoxIndirectParamW
DialogBoxParamW
CreateDialogIndirectParamW
CreateDialogParamW
IsWindowVisible
DestroyWindow
IsWindow
CreateWindowExW
CallWindowProcW
DispatchMessageW
TranslateMessage
GetMessageW
LoadImageW
PtInRect
InflateRect
ClientToScreen
GetWindowRect
GetWindowTextW
DrawTextW
IsWindowEnabled
GetKeyState
GetFocus
GetDlgCtrlID
SetWindowPos
RegisterClassW
DefWindowProcW
IsIconic
SystemParametersInfoW
RegisterClassExW
GetComboBoxInfo
GetMonitorInfoW
MonitorFromPoint
UpdateWindow
SendMessageW
PostThreadMessageW
LoadCursorW
GetWindowLongW
FillRect
GetSysColorBrush
GetSysColor
ScreenToClient
HideCaret
GetCursorPos
SetCursor
InvalidateRect
EndPaint
PostMessageW
LoadStringW
GetWindow
GetWindowThreadProcessId
MessageBoxW
SetForegroundWindow
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
DestroyIcon
LoadIconW
GetParent
SetWindowLongW
MessageBeep
GetClientRect
SetWindowTextW
GetDC
GetAsyncKeyState
SetFocus
SendDlgItemMessageW
IsDlgButtonChecked
GetDlgItemTextW
GetDlgItem
ShowWindow
SetClassLongW

gdi32

CreatePen
CreateSolidBrush
GetStockObject
LineTo
SetBkMode
GetTextMetricsW
MoveToEx
ExtTextOutW
SetBrushOrgEx
CreateRectRgn
DeleteObject
FrameRgn
GetClipBox
GetRgnBox
GetWindowOrgEx
OffsetRgn
SelectObject
RoundRect
SaveDC
ExtSelectClipRgn
IntersectClipRect
SetWindowOrgEx
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
GetDeviceCaps
SetBkColor
CreateDIBSection
CombineRgn
CreateRoundRectRgn
ArcTo
BeginPath
CloseFigure
EndPath
PathToRegion
WidenPath
GetBitmapBits
CreatePatternBrush
GetTextColor
SelectClipRgn
GetPixel
BitBlt
SetTextColor
GetTextExtentPoint32W
GetCharWidth32W
GetObjectW
RestoreDC
CreateFontIndirectW

advapi32

RegQueryValueExW
RegSetValueExW
RegDeleteValueW

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW
ShellExecuteW

ole32

CreateStreamOnHGlobal
CoTaskMemFree

Sections

.text
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7d36fbad78639283e6ac134cfe3e0660

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

comctl32

gdiplus

msimg32

kernel32

user32

gdi32

advapi32

shell32

ole32

Sections

.text Size: 204KB - Virtual size: 204KB

.rdata Size: 57KB - Virtual size: 56KB

.data Size: 3KB - Virtual size: 7KB

.rsrc Size: 23KB - Virtual size: 23KB

.reloc Size: 13KB - Virtual size: 13KB

.text
Size: 204KB - Virtual size: 204KB

.rdata
Size: 57KB - Virtual size: 56KB

.data
Size: 3KB - Virtual size: 7KB

.rsrc
Size: 23KB - Virtual size: 23KB

.reloc
Size: 13KB - Virtual size: 13KB