HEUR-Backdoor[.]MSIL[.]Crysan[.]gen-4b7c7ecab6728bb[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

HEUR-Backdoor.MSIL.Crysan.gen-4b7c7ecab6728bb.exe
Size

936KB
MD5

902a81dc236a681bc29d26542de8c8ae
SHA1

ecc957aef39062cc4ef26e0273895bac8323623d
SHA256

ddc48d44fbf6ac0e42f7ea6e9bae4e460ac1ef29535dd32f9bfb2249eb55f29c
SHA512

d487459766c7d0ffd4629378ccc94beb13f65c2e1758dea8e9d29759c8291b224b39bba72bbb91881f9353d19c354aec13ee3c64516f2f5fc7474de91c2af8e1
SSDEEP

12288:dr+w+Px6rT9aUvCYMsFzPcc1lZgZMrfqgn811CYjojv3KapxhAnSWp9X5Z7aUvC4:hRVCYM6zPcc+1CY00ptRCYM6zPMcL

Score

N/A

Malware Config

Signatures

Files

HEUR-Backdoor.MSIL.Crysan.gen-4b7c7ecab6728bb.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 925KB - Virtual size: 925KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 283KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ