SecuriteInfo[.]com[.]Trojan[.]Crypt[.]22959[.]23935[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Trojan.Crypt.22959.23935.exe
Size

315KB
MD5

100464ab66c5b7d10d9d2fa9d4a505ba
SHA1

bc4d8c5e5414d9aefc24e91c45869a3e2cd8fc37
SHA256

041256029c39e6cb321ff5eba24e275b802d6f7a903a3e37ad30a7d655382dda
SHA512

5e44e44671fd096e3d0fa6c7726ea918f4e73d1596461af4f9cd6e599e8cefc9039f18db646ecaed4c12e7f6a3d9b3aaadc773a576b5f39972d90186b896d1d9
SSDEEP

6144:+nG5RMJccw706pHifYg08cK3ZKW1BmOR/fSOhrcN:+nHJXZ6tifmZKp5Dtf/h4N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.Crypt.22959.23935.exe

Files

SecuriteInfo.com.Trojan.Crypt.22959.23935.exe
.exe windows:5 windows x86 arch:x86

e167ec58f92e5a352b6623a3696b5fe7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\source\VinylStudio\V14_11\Installer\Release\VSInstall_Exe.pdb

Imports

comctl32

ImageList_Destroy
ImageList_GetIconSize
ImageList_Add
ImageList_Draw
ImageList_Create
InitCommonControlsEx

gdiplus

GdipCloneBrush
GdipFree
GdipAlloc
GdipDeleteBrush
GdipDrawImageRectI
GdipFillRectangleI
GdipSetInterpolationMode
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCloneBitmapAreaI
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageDimension
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdipLoadImageFromFileICM
GdipLoadImageFromStreamICM
GdipLoadImageFromFile
GdipLoadImageFromStream
GdipFillPolygon
GdipSetPixelOffsetMode
GdipSetSmoothingMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipCreateSolidFill

msimg32

TransparentBlt
GradientFill

kernel32

LeaveCriticalSection
Sleep
CloseHandle
FormatMessageW
lstrcmpiW
GetVersionExW
MultiByteToWideChar
WideCharToMultiByte
CompareStringW
InterlockedIncrement
DeleteCriticalSection
SetEvent
LockResource
GetCurrentProcessId
LoadResource
SizeofResource
GetTickCount
FindResourceW
InterlockedDecrement
GetModuleFileNameW
FoldStringW
FreeLibrary
InitializeCriticalSection
GetLocalTime
OutputDebugStringW
HeapFree
GetACP
ExitProcess
WriteFile
GetStdHandle
HeapSize
GetModuleHandleExW
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
EncodePointer
RtlUnwind
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LoadLibraryExA
VirtualQuery
VirtualProtect
GetSystemInfo
RaiseException
SetLastError
GetLastError
GetCurrentThreadId
GetShortPathNameW
LocalFree
EnterCriticalSection
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetModuleHandleW
GetProcAddress
LoadLibraryW
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapReAlloc
LCMapStringW
GetFileType
ReadFile
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetStringTypeW
GetProcessHeap
FlushFileBuffers
GetConsoleCP
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
DecodePointer
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
WriteConsoleW
SetEndOfFile
CreateFileW

user32

ReleaseDC
BeginPaint
GetWindowTextLengthW
LoadBitmapW
MonitorFromWindow
DrawFocusRect
DrawFrameControl
IsZoomed
IsDialogMessageW
GetIconInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetClassNameW
EnumChildWindows
SetParent
SetClassLongW
GetClassLongW
OffsetRect
WindowFromPoint
GetCursor
RedrawWindow
ValidateRect
GetWindowRgn
GetForegroundWindow
UpdateWindow
IsIconic
GetSystemMetrics
KillTimer
SetTimer
EndDialog
DialogBoxIndirectParamW
DialogBoxParamW
CreateDialogIndirectParamW
CreateDialogParamW
IsWindowVisible
IsWindow
CreateWindowExW
CallWindowProcW
DispatchMessageW
TranslateMessage
GetMessageW
LoadImageW
PtInRect
InflateRect
ClientToScreen
GetWindowRect
GetWindowTextW
DrawTextW
IsWindowEnabled
GetKeyState
GetFocus
GetDlgCtrlID
SetWindowPos
RegisterClassW
DefWindowProcW
PostThreadMessageW
LoadCursorW
MapDialogRect
RegisterClassExW
GetComboBoxInfo
GetMonitorInfoW
MonitorFromPoint
SystemParametersInfoW
SendMessageW
GetWindowLongW
FillRect
GetSysColorBrush
GetSysColor
ScreenToClient
HideCaret
GetCursorPos
SetCursor
InvalidateRect
EndPaint
PostMessageW
LoadStringW
GetWindow
GetWindowThreadProcessId
MessageBoxW
SetForegroundWindow
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
DestroyIcon
LoadIconW
GetParent
SetWindowLongW
MessageBeep
GetClientRect
SetWindowTextW
GetDC
GetAsyncKeyState
SetFocus
SendDlgItemMessageW
IsDlgButtonChecked
GetDlgItemTextW
GetDlgItem
ShowWindow
DestroyWindow
IntersectRect

gdi32

CreatePen
CreateSolidBrush
GetStockObject
LineTo
SetBkMode
GetTextMetricsW
MoveToEx
ExtTextOutW
SetBrushOrgEx
CreateRectRgn
DeleteObject
FrameRgn
GetClipBox
GetRgnBox
GetWindowOrgEx
OffsetRgn
SelectObject
RoundRect
SaveDC
ExtSelectClipRgn
IntersectClipRect
SetWindowOrgEx
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
GetDeviceCaps
SetBkColor
CreateDIBSection
CombineRgn
CreateRoundRectRgn
ArcTo
BeginPath
CloseFigure
EndPath
PathToRegion
WidenPath
GetBitmapBits
CreatePatternBrush
GetTextColor
SelectClipRgn
GetPixel
BitBlt
SetTextColor
GetTextExtentPoint32W
GetCharWidth32W
GetObjectW
RestoreDC
CreateFontIndirectW

advapi32

RegQueryValueExW
RegSetValueExW
RegDeleteValueW

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW
ShellExecuteW

ole32

CreateStreamOnHGlobal
CoTaskMemFree

Sections

.text
Size: 206KB - Virtual size: 205KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e167ec58f92e5a352b6623a3696b5fe7

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

comctl32

gdiplus

msimg32

kernel32

user32

gdi32

advapi32

shell32

ole32

Sections

.text Size: 206KB - Virtual size: 205KB

.rdata Size: 57KB - Virtual size: 57KB

.data Size: 3KB - Virtual size: 8KB

.rsrc Size: 23KB - Virtual size: 23KB

.reloc Size: 14KB - Virtual size: 13KB

.text
Size: 206KB - Virtual size: 205KB

.rdata
Size: 57KB - Virtual size: 57KB

.data
Size: 3KB - Virtual size: 8KB

.rsrc
Size: 23KB - Virtual size: 23KB

.reloc
Size: 14KB - Virtual size: 13KB