SecuriteInfo[.]com[.]PUA[.]RiskWare[.]Crypter[.]8167[.]7167[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.PUA.RiskWare.Crypter.8167.7167.exe
Size

3.3MB
MD5

47382931955ab5dc02cf3a5ab90e7768
SHA1

9f94526d98b0e50f7731b403b517435a9de84b89
SHA256

3e9efb346865693577b962285fc607c585fba35a28b14c68fe9e0c4777decd0a
SHA512

fff53687298076284af0845fec9ae12a060321645ee38631223098b58f75291c0a7896aa87f606f37c3402f41711c8395271b9c129c1feb8b298ef8a0c284cb7
SSDEEP

49152:yfhh3Sb8na74Q35pJ3gOawnMr9w0eWhqI1:THyH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.PUA.RiskWare.Crypter.8167.7167.exe

Files

SecuriteInfo.com.PUA.RiskWare.Crypter.8167.7167.exe
.exe windows:6 windows x64 arch:x64

f22ae7251336bba51e953c733f027b25

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\a\viu\viu\target\x86_64-pc-windows-msvc\release\deps\viu.pdb

Imports

kernel32

GetCurrentDirectoryW
GetEnvironmentVariableW
GetCurrentThread
GetCurrentProcess
GetCommandLineW
SetFilePointerEx
GetSystemInfo
QueryPerformanceCounter
SetLastError
SwitchToThread
SetThreadStackGuarantee
AddVectoredExceptionHandler
GetLastError
ReleaseSRWLockShared
FindClose
GetCurrentProcessId
ReleaseMutex
GetCurrentThreadId
WakeAllConditionVariable
WakeConditionVariable
RtlLookupFunctionEntry
HeapAlloc
GetProcessHeap
HeapFree
InitializeSListHead
HeapReAlloc
AcquireSRWLockShared
WaitForSingleObjectEx
LoadLibraryA
CreateMutexA
FindNextFileW
GetFileInformationByHandle
RtlVirtualUnwind
WriteConsoleW
FindFirstFileW
DeleteFileW
GetFileType
GetModuleHandleW
FormatMessageW
GetModuleFileNameW
ExitProcess
GetFullPathNameW
QueryPerformanceFrequency
MultiByteToWideChar
WideCharToMultiByte
ReadConsoleW
CreateThread
GetSystemTimeAsFileTime
GetTempPathW
CreateFileW
GetProcAddress
GetModuleHandleA
Sleep
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlCaptureContext
SleepConditionVariableSRW
SetConsoleTextAttribute
GetFileInformationByHandleEx
ReadConsoleInputW
GetNumberOfConsoleInputEvents
FillConsoleOutputAttribute
FillConsoleOutputCharacterA
SetConsoleCursorPosition
GetConsoleScreenBufferInfo
SetConsoleMode
GetConsoleMode
GetStdHandle
TryAcquireSRWLockExclusive
SetFileAttributesW
ReleaseSemaphore
WaitForSingleObject
SetConsoleCtrlHandler
CreateSemaphoreA
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
CloseHandle
IsProcessorFeaturePresent

advapi32

SystemFunction036

ntdll

RtlNtStatusToDosError
NtWriteFile
NtReadFile

bcrypt

BCryptGenRandom

vcruntime140

memcmp
__current_exception_context
__current_exception
__CxxFrameHandler3
memcpy
memmove
memset
__C_specific_handler
_CxxThrowException

api-ms-win-crt-math-l1-1-0

roundf
floorf
truncf
sinf
ceilf
__setusermatherr
powf
ceil
exp2f
expf

api-ms-win-crt-runtime-l1-1-0

_exit
_initterm_e
__p___argc
_initterm
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_initialize_narrow_environment
_configure_narrow_argv
exit
_set_app_type
_get_initial_narrow_environment
_initialize_onexit_table
_register_onexit_function
_crt_atexit
terminate
_seh_filter_exe

api-ms-win-crt-stdio-l1-1-0

_set_fmode
__p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free
_set_new_mode

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 780KB - Virtual size: 779KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f22ae7251336bba51e953c733f027b25

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

advapi32

ntdll

bcrypt

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

Sections

.text Size: 2.5MB - Virtual size: 2.5MB

.rdata Size: 780KB - Virtual size: 779KB

.data Size: 1024B - Virtual size: 1KB

.pdata Size: 94KB - Virtual size: 93KB

.reloc Size: 11KB - Virtual size: 11KB

.text
Size: 2.5MB - Virtual size: 2.5MB

.rdata
Size: 780KB - Virtual size: 779KB

.data
Size: 1024B - Virtual size: 1KB

.pdata
Size: 94KB - Virtual size: 93KB

.reloc
Size: 11KB - Virtual size: 11KB