crypt[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

crypt.exe
Size

35KB
MD5

c49277bcdb291c3638efcd29607a44f7
SHA1

cacc6d14993287e59a8cefadfafe29822e139efd
SHA256

30da8c63221f50d1ca0caded328113f48dc01e92dc9914dba265d653fd0fab75
SHA512

e79874fb92808f471db82f100f88ab504b7f61e005f5bda424f1ea242ede94d3a37dcd29fd455fe0de5cb320b8b1c30ac9f50a2cb2fe147b7233aa30df1bf4e2
SSDEEP

768:Z9v5+m2GsRO8zCXrxn1TcQH6A80Y5m/LOSyuZWfn7v:ZjNMO8zC7x9raPkLOvf7v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
crypt.exe

Files

crypt.exe
.exe windows x86

312b362b5c9cbcf326d57ac163dfe875

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
VirtualAlloc
VirtualFree
WriteFile
lstrcatA
lstrcpyA
ReadFile
CloseHandle
GetFileSize
GetLastError
CreateFileA
GetSystemInfo
VirtualProtect
GetLocaleInfoA
SetStdHandle
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
GetModuleHandleA
GetCommandLineA
GetVersionExA
HeapDestroy
HeapCreate
HeapReAlloc
ExitProcess
GetProcAddress
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
FlushFileBuffers
SetFilePointer
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind
VirtualQuery

cadt

InstrDecode

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE