home

w7_striata_reader.exe

Striata Communication Solutions (Pty) Ltd.

This is a setup program which is used to install the application. The file has been seen being downloaded from www.standardbank.co.za and multiple other hosts.
Publisher:
Striata Communication Solutions  (signed by Striata Communication Solutions (Pty) Ltd.)

Description:
Striata Reader

Version:
2.9-1

MD5:
b3aebd5c82f5ac55d45333e724b15a46

SHA-1:
dbc3f7bd92adc1edc53841896bece9b394ef5dc9

SHA-256:
e51e30a1f170443800bf588054e15d6501c2cab5d014c304b71ae0dc52a5b6f3

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/26/2024 5:37:32 AM UTC  (today)

Scan engine
Detection
Engine version

Dr.Web
Trojan.Siggen5.10249
9.0.1.0138

File size:
59 KB (60,400 bytes)

Copyright:
Copyright Striata Communication Solutions, 2000-2007

Original file name:
striata-reader

File type:
Executable application (Win32 EXE)

Language:
English (South Africa)

Common path:
C:\users\{user}\downloads\w7_striata_reader.exe

Digital Signature
Signed by:
Striata Communication Solutions (Pty) Ltd.

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
5/12/2009 2:00:00 AM

Valid to:
5/17/2011 1:59:59 AM

Subject:
CN=Striata Communication Solutions (Pty) Ltd., OU=SECURE APPLICATION DEVELOPMENT, O=Striata Communication Solutions (Pty) Ltd., L=Johannesburg, S=Gauteng, C=ZA

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
247A39E463193D4B40A67BE79EEF3A9F

File PE Metadata
Compilation timestamp:
9/29/2009 11:09:15 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:9H7PZv/n5FlJl7QaQs1e4gp0LeQRl5z6QPo3rtonGxHsNn4H:lZX7l7QJsvgGLj8hbt5xMNnO

Entry address:
0x24FE

Entry point:
55, 8B, EC, 6A, FF, 68, 98, 10, 40, 00, 68, 80, 26, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, FF, 15, 50, 10, 40, 00, 59, 83, 0D, AC, 26, 40, 00, FF, 83, 0D, B0, 26, 40, 00, FF, FF, 15, 54, 10, 40, 00, 8B, 0D, A8, 26, 40, 00, 89, 08, FF, 15, 58, 10, 40, 00, 8B, 0D, A4, 26, 40, 00, 89, 08, A1, 5C, 10, 40, 00, 8B, 00, A3, B4, 26, 40, 00, E8, 10, 01, 00, 00, 39, 1D, B4, 21, 40, 00, 75, 0C, 68, 7A, 26, 40, 00, FF, 15, 60, 10...
 
[+]

Entropy:
7.8161

Developed / compiled with:
Microsoft Visual C++ v6.0

The file w7_striata_reader.exe has been seen being distributed by the following 4 URLs.

https://www.standardbank.co.za/secure/.../striata-reader.exe

https://www.standardbank.co.za/secure/.../W7_striata_reader.exe

http://www.striata.com/.../striata-reader.exe

http://www.striata.com/.../license_result-3.html

Scan w7_striata_reader.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.