Static task
static1
Behavioral task
behavioral1
Sample
Client_crypt.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Client_crypt.exe
Resource
win10v2004-20220812-en
General
-
Target
Client_crypt.exe
-
Size
1.0MB
-
MD5
6fa3b27b89661005170aafe3fda48388
-
SHA1
f019587d6b8bb8e8834793d3b3d6a68277f258ef
-
SHA256
de0243917245895bebcaa2084a9dd923d9878b0b9e5c04373caa7c1f7c8c02ba
-
SHA512
c80e6b25720b39956ff7c67f71e655414c1f361972222aa2ced048bd6f05ca1469b1d1e0a91a20193a4ed87e930948de34b80ec6b9b59b81b48bf49b3f21ffd0
-
SSDEEP
24576:yT+ua8m657w6ZBLmkitKqBCjC0PDgM5An9B:ycVV1BCjB8
Malware Config
Signatures
Files
-
Client_crypt.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ