General

  • Target

    SecuriteInfo.com.Riskware.AdAnti.20287.26357.exe

  • Size

    14.2MB

  • MD5

    9e916f04c4d7e01bdd6de42cba2019d7

  • SHA1

    20811d633036ba7f9522bb60e3ef359960b4324d

  • SHA256

    1fc473958611f369cd79f6d35d96c8bd7ff5724b9980106b3284c917da17d674

  • SHA512

    c7ea5127ccd7fac203d1e3ecf459322792af58016ec9ffafe0fdc2cdf901e4f8b295ed60eba8998c27f338acf551b05a9753ea496eb3fcf57a0635c344cac785

  • SSDEEP

    393216:kgexuDFDVOz2sQhDSx3hP36Ll0lkrlQQVGxFWKXVD/:kgex0OisLxhySkrlrGxFx/

Score
3/10

Malware Config

Signatures

  • Unsigned PE 15 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • SecuriteInfo.com.Riskware.AdAnti.20287.26357.exe
    .exe windows:4 windows x86 arch:x86

    5e27740d9754d3decf77cb65d4f31c5f


    Headers

    Imports

    Sections

  • $PLUGINSDIR/BgWorker.dll
    .dll windows:4 windows x86 arch:x86

    db2755f409b81c4dbfc04f648cfb80b9


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    f2ac1ab587d5531d5f1bf76c094aef4c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDui.dll
    .dll windows:5 windows x86 arch:x86

    d8794fa77d0bfdd0aaec15a34a5545b4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    8abe046ef411de4d3e6e831b6b1ee264


    Headers

    Imports

    Exports

    Sections

  • FLiNGTrainer.exe
    .exe windows:5 windows x86 arch:x86

    af21062518fe43a2e4ab88215bfc4a55


    Headers

    Imports

    Sections

  • InstallReport.dll
    .dll windows:5 windows x86 arch:x86

    27537721994293e4b243910e0ad9e395


    Headers

    Imports

    Exports

    Sections

  • alllibs/config.xml
  • libReportParam2.dll
    .dll windows:5 windows x86 arch:x86

    a4889455bfa9aa835df20d2f8b90d30a


    Headers

    Imports

    Exports

    Sections

  • libpics/.net_frame.jpg
    .jpg
  • libpics/AppLocale.jpg
    .jpg
  • libpics/Game_for_Windows.jpeg
    .jpg
  • libpics/Microsoft_XNA_Framework.jpeg
    .jpg
  • libpics/NVIDIA_PhysX.jpeg
    .jpg
  • libpics/Rapture3D.jpeg
    .png
  • libpics/Rockstar_Games.jpeg
    .jpg
  • libpics/directx9-c.jpeg
    .jpg
  • libpics/openal.jpeg
    .jpg
  • libpics/origin.jpeg
    .jpg
  • libpics/steam.jpeg
    .jpg
  • libpics/uplay.jpeg
    .jpg
  • libpics/vb6_lib.jpg
    .jpg
  • libpics/vc2005run_lib_pic.jpg
    .jpg
  • libpics/vc2008run_lib_pic.jpg
    .jpg
  • libpics/vc2010run_lib_pic.jpg
    .jpg
  • libpics/vc2012run_lib_pic.jpg
    .jpg
  • libpics/vc2013run_lib_pic.jpg
    .jpg
  • libpics/vc2015run_lib_pic.jpg
    .jpg
  • libpics/vc2017run_lib_pic.jpg
    .jpg
  • libpics/vc2019run_lib_pic.jpg
    .jpg
  • libpics/xml6_parse.jpg
    .jpg
  • node.dll
    .dll windows:5 windows x86 arch:x86

    b378eb88ec3924495a3e052cf4f00908


    Headers

    Imports

    Exports

    Sections

  • starterHelper64.exe
    .exe windows:5 windows x64 arch:x64

    f249cc0681a9990780363099961b91e8


    Headers

    Imports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    5e27740d9754d3decf77cb65d4f31c5f


    Headers

    Imports

    Sections

  • $PLUGINSDIR/BgWorker.dll
    .dll windows:4 windows x86 arch:x86

    db2755f409b81c4dbfc04f648cfb80b9


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    f2ac1ab587d5531d5f1bf76c094aef4c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDui.dll
    .dll windows:5 windows x86 arch:x86

    d8794fa77d0bfdd0aaec15a34a5545b4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    8abe046ef411de4d3e6e831b6b1ee264


    Headers

    Imports

    Exports

    Sections