Static task
static1
Behavioral task
behavioral1
Sample
Patrick-Crypter-Builder.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Patrick-Crypter-Builder.exe
Resource
win10v2004-20230221-en
General
-
Target
Patrick-Crypter-Builder.exe
-
Size
374KB
-
MD5
504e4a08831ae935a62d7bf84afa5146
-
SHA1
72b0f7e5075aaf34c7c37e1fcf417f43f179249d
-
SHA256
f9594e4b213a61c1e3e85e8461c668a03ab36c8019c0d18ddf1ed3e52e69eec8
-
SHA512
1c4f7f01ac23e1ecdec920f92ba86034fa6d9cd186a54abb000d41034fefec2454fea46bd0258674f79b8d179fd8612817927d325957ae500090feebacb33527
-
SSDEEP
6144:tBRzhN67VjK/l3R42OoswxXEquo2bIqdAq6SFAJ0fTq7V8o6a2zAKFfIt:t3zhgtIl3O2Oo7xXE9bIqdcSF+0fTq7X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Patrick-Crypter-Builder.exe
Files
-
Patrick-Crypter-Builder.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 371KB - Virtual size: 371KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ