SecuriteInfo[.]com[.]Variant[.]Application[.]Miner[.]2[.]11264881[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Variant.Application.Miner.2.11264881.exe
Size 31.4MB
Sample261019-v8d2caet91
SHA256 2e96f9d09b8d9cec883a46cc86c09e68eca00446e03440f26d7daa43227c9ae5
MD5 6f33952869db51db256bca008d7e841d
SHA1 f738143aac22fa16870b6e10a8dc77149e920191
SHA512 e903d64319460ffbc328f50979a0fbd080c2e99569e6d66301adfb4503e979fe0d6d67f820b109cff433642f15011b8f8b962d059e051429fefa4f20ebe6476a
SSDEEP 393216:G3WIWZ4V+WIWoCibWIWG60jWIWlPGLWIWIeR:G8h/a6
TLSH
T107775D8A7BB97506C094987C615EAFA4CC5A3533003FCEE92CC04DEB0E65EEDF5521A9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Variant.Application.Miner.2.11264881.exe

File Explorer

SecuriteInfo.com.Variant.Application.Miner.2.11264881.exe

.dll 31.4MB

SecuriteInfo.com.Variant.Application.Miner.2.11264881.exe

IMPHASH adc2f9dc4e03cdf5a9c43dddbb380617
SHA256 2e96f9d09b8d9cec883a46cc86c09e68eca00446e03440f26d7daa43227c9ae5
MD5 6f33952869db51db256bca008d7e841d
SHA1 f738143aac22fa16870b6e10a8dc77149e920191
SHA512 e903d64319460ffbc328f50979a0fbd080c2e99569e6d66301adfb4503e979fe0d6d67f820b109cff433642f15011b8f8b962d059e051429fefa4f20ebe6476a
SSDEEP 393216:G3WIWZ4V+WIWoCibWIWG60jWIWlPGLWIWIeR:G8h/a6
TLSH
T107775D8A7BB97506C094987C615EAFA4CC5A3533003FCEE92CC04DEB0E65EEDF5521A9
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

271984

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

nvcuda

cuGetErrorString cuDeviceGet cuDevicePrimaryCtxRetain cuCtxSynchronize cuModuleLoadDataEx cuModuleUnload cuModuleGetFunction cuLaunchKernel_ptsz cuInit

nvrtc64_102_0

nvrtcGetErrorString nvrtcDestroyProgram nvrtcCompileProgram nvrtcGetPTXSize nvrtcGetPTX nvrtcGetProgramLogSize nvrtcGetProgramLog nvrtcAddNameExpression nvrtcGetLoweredName nvrtcCreateProgram

kernel32

LocalFree WriteConsoleW HeapSize GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose GetFileSizeEx SetFilePointerEx CloseHandle QueryPerformanceCounter QueryPerformanceFrequency WaitForSingleObject SetWaitableTimer SwitchToThread CreateWaitableTimerA FreeLibrary GetProcAddress GetLastError HeapCreate HeapDestroy HeapAlloc HeapReAlloc HeapFree InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive InitializeCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection SetEvent ResetEvent Sleep GetCurrentProcess GetCurrentProcessId GetCurrentThreadId TlsAlloc TlsGetValue TlsSetValue TlsFree VirtualProtect FreeLibraryAndExitThread VerSetConditionMask CreateFileW GetFileAttributesW GetFullPathNameW SetLastError GetSystemDirectoryW GetModuleFileNameW GetModuleHandleW LoadLibraryExW LocalAlloc VerifyVersionInfoW GetConsoleMode GetConsoleOutputCP FlushFileBuffers InitializeCriticalSectionAndSpinCount WaitForSingleObjectEx CreateEventW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetSystemTimeAsFileTime InitializeSListHead InitializeCriticalSectionEx WideCharToMultiByte FlsAlloc FlsGetValue FlsSetValue FlsFree EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx GetStringTypeW GetCPInfo RtlPcToFileHeader RaiseException RtlUnwindEx InterlockedFlushSList CreateThread ExitThread GetModuleHandleExW ExitProcess SetStdHandle GetFileType LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetStdHandle WriteFile

Name

.text

Size

399KB

Virtual Size

399KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

182KB

Virtual Size

182KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

74KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.nv_fatb

Size

30.7MB

Virtual Size

30.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.nvFatBi

Size

512B

Virtual Size

216B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

22KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=176, id=261, version=33140,

count=94, id=260, version=33140,

count=25, id=259, version=33140,

count=1, productName=Unmarked objects (old),

count=1, id=253, version=28518,

count=79, id=261, version=30034,

count=17, id=260, version=30034,

count=10, id=259, version=30034,

count=4, id=257, version=33140,

count=2, id=257, version=25019,

count=3, id=203, productName=VS2012 build 50727, version=50727,

count=209, id=1, productName=Unmarked objects,

count=1, id=206, productName=VS2012 build 50727, version=50727,

count=15, id=207, productName=VS2012 build 50727, version=50727,

count=1, id=260, version=30159,

count=13, id=261, version=30159,

count=1, id=256, version=30159,

count=1, id=255, version=30159,

count=1, id=151,

count=1, id=258, version=30159,