home

striata-reader.exe

Striata Communication Solutions

The executable striata-reader.exe has been detected as malware by 11 anti-virus scanners. This is a setup program which is used to install the application. Infected by an entry-point obscuring polymorphic file infector which will create a peer-to-peer botnet and receives URLs of additional files to download. The file has been seen being downloaded from reader.striata.com.
Publisher:
Striata Communication Solutions

Description:
Striata Reader

Version:
2.21-1

MD5:
04abd6e167be97d7eba99c21ae91c264

SHA-1:
abd4536dcda06fef83eafb7eeab641d90cbb963d

SHA-256:
ee4d63442b8b128ef424e5bab9919659e1733d046d78418e7030bedf565953fa

Scanner detections:
11 / 68

Status:
File is infected by a Virus

Explanation:
The file is infected by a polymorphic file infector virus.

Analysis date:
4/27/2024 12:33:17 AM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win32:SaliCode
160503-1

AVG
Win32/Sality
2015.0.4568

Dr.Web
Win32.Sector.30
9.0.1.05190

Emsisoft Anti-Malware
Win32.Sality
11.5.0.6191

ESET NOD32
Win32/Sality.NBA virus
8.0.319.0

F-Prot
W32/Sality.gen2
4.6.5.141

F-Secure
Win32.Sality.3
5.15.96

Kaspersky
Virus.Win32.Sality
15.0.0.562

McAfee
Virus.W32/Sality.gen.z
18.0.204.0

Microsoft Security Essentials
Threat.Undefined
1.223.281.0

Norman
Win32.Sality.3
28.05.2016 15:32:18

File size:
379.7 KB (388,840 bytes)

Copyright:
Copyright Striata Communication Solutions, 2000-2015

Original file name:
striata-reader

File type:
Executable application (Win32 EXE)

Language:
English (South Africa)

Common path:
C:\users\{user}\downloads\striata-reader.exe

File PE Metadata
Compilation timestamp:
8/27/2015 9:55:14 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
6144:JP+EK/WYYafr03a2IxdJFUXpNL3kniNriB4wse+AhgtfZkS6iAEfwOOkAW1iUP:9+EK/WArGkmp13KiNrIieQZSSeEfwOOG

Entry address:
0x2B1C

Entry point:
60, FE, C0, 81, DD, C8, 78, 86, D5, 18, E9, 2A, C8, 69, CB, A6, C2, 49, 03, 87, DB, 4B, 69, F8, DD, 41, B4, E6, 81, F6, B9, 94, 00, 00, 41, 0F, AF, D0, 88, FE, 0F, AF, E9, B8, 41, 81, 00, 92, FE, CD, 0F, AF, C3, 69, D3, FE, 4B, 79, A1, 57, 68, 78, 41, 0B, 00, 75, 04, 8A, FA, 84, FB, E8, 00, 00, 00, 00, 5B, EB, 07, 80, F8, D4, 12, C8, FF, CA, F7, C3, 65, 6D, B5, BD, 85, DA, 10, D5, 81, FE, 11, C5, 00, 00, 77, 04, B2, 09, 87, C5, 0F, AF, F3, 00, C0, 39, F8, 87, D0, 33, CD, 8B, D6, F2, 53, BD, 9C, F5, 88, E3...
 
[+]

Entropy:
7.9749  (probably packed)

The file striata-reader.exe has been seen being distributed by the following URL.

https://reader.striata.com/downloads/Windows/.../striata-reader.exe

Remove striata-reader.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.