Kripto Clipper[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Kripto Clipper.exe
Size

586KB
MD5

eeab8204c8e21722f6c62802bbf65be7
SHA1

af9b0d81d5e7bcf08abe202c95e79bb5094f70a8
SHA256

5564a3befa7fccb53c4fbf8d4180d52e1395aac0796f1c62dfd9546668e2ebbb
SHA512

803ee7f38ecf2be90194b615251d3b1d0b5f0336cfd210522cf91f1cd369b7a5f7b90dead6e5e728e2f47d0faf0e0c97ed72c80af9eb69fbd5c52cf57d43eecb
SSDEEP

6144:zM6keKaxgPTCzeL/HiuY0NTNojNTgV0oZWIY7lN9E+DbnsnJxbP3shtZ3h8Zjw3s:zM6kebF2F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Kripto Clipper.exe

Files

Kripto Clipper.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 340KB - Virtual size: 340KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ