Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.Win32.Kryptik.ali2000016.32490.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan.Win32.Kryptik.ali2000016.32490.exe
Resource
win10v2004-20230703-en
General
-
Target
SecuriteInfo.com.Trojan.Win32.Kryptik.ali2000016.32490.27488
-
Size
287KB
-
MD5
32d20a99b8de3a12a228c13c740a9546
-
SHA1
46bba10f9890124bb418ee9e3d5ba24fc71a95ab
-
SHA256
a2d7e8645e403b2e1e92195af31c57b43ed1b257901b0e5f3607a8721a7cfa8d
-
SHA512
c6ce84e1f7bf63291ea2679ed064d6e675cc92d41708504e042c97ab716c2cd2bff54ba411beec67d0eb59e54b130323c31ee2d7a8883afdf9945705f6b4186e
-
SSDEEP
6144:uB0eHOlB/SKuadBltjAIL1TAtCH1+9yo6OJrAeMoUSKXV:zAMB2adDtsIL1TAtCV+9yorpDU/XV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Trojan.Win32.Kryptik.ali2000016.32490.27488
Files
-
SecuriteInfo.com.Trojan.Win32.Kryptik.ali2000016.32490.27488.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 284KB - Virtual size: 283KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ