Static task
static1
Behavioral task
behavioral1
Sample
attackercrypter.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
attackercrypter.exe
Resource
win10v2004-20230220-en
General
-
Target
attackercrypter.exe
-
Size
576KB
-
MD5
7cf34e6f05d51938bffd68fc4c8d7d46
-
SHA1
675b48951de29a8dc45ab295e3d8b87004c90e70
-
SHA256
7d7459e024efd8e9cca90100c330a2d3da67cea52f4747fa6c19ebab2b1bef74
-
SHA512
6d4c6e2308f820180dc1dcd96ccb0bd666e77cc445fffd881bf685d9586f1994a7d1a2c040c1746f7619f8263fd37ad5d59cd4c59045f49361361b94464ba233
-
SSDEEP
6144:KHkRzRHQNNsJyhO/KDyCLAzqMsnNPDq14b/ulUvSAU7T7vw7BXY4isWiagVlX4:wkpRHQrsJOByCLAzqvbaO2IN9WiBVlX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource attackercrypter.exe
Files
-
attackercrypter.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 570KB - Virtual size: 570KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ