crypt[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

crypt.exe
Size

28KB
MD5

f73529f5e20a493744df1a5e3ac6c678
SHA1

18089b73cd08970f1ca25598388e6d1d2887cb2b
SHA256

64f03bc64c0601a8e2f553b2b289f945de748347b4ed0b7f3cf453a0123960ab
SHA512

091547728645b8808fefa3836bc4bb3d023047ae6f1c1bc24ff843da5901324de339d4cfdc4ef0a3898bb952fe820e052f809324ca172c89ad13402eccf43f0c
SSDEEP

384:M6+gT94S/+SYoT9rLh4iyRmlbhmcretnPxJogTG:i694mYoT9LiidzkPxJo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
crypt.exe

Files

crypt.exe
.exe windows x86

f5d7733fbc2f3e308ff85eb18141be1f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetVersion
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
VirtualAlloc
HeapReAlloc
GetLastError
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetFilePointer
CloseHandle
SetStdHandle
LCMapStringA
LCMapStringW

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE