Krustify[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Krustify.exe
Size

495KB
MD5

586818bbb2a3ab71344884aeea2c7be9
SHA1

e6eef91df3e85bb9dfb282166b691860c54d110f
SHA256

08a079e09dab7fccb32f935763579815c1e6abc96e9cebad37722759e174ddb6
SHA512

2fbd4ebf61d216bd11d77a6698638547a4bc27601f47d6d033599f395f33a394427da25452e090307e9870d9a7a2f16f4814f5cea58f3f977012843d8c314386
SSDEEP

12288:xnsrKUzhXpGCUqvGGGwGGGGClGGGGG7bsrC9ba+vrA:xsr9zhXpGCUqvGGGwGGGGClGGGGG7Yr9

Score

1^/10

Malware Config

Signatures

Files

Krustify.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 414KB - Virtual size: 414KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ