CryptedTest[.]bin[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CryptedTest.bin.exe
Size

90KB
MD5

88d8edc589e9e439dd1946b03614cceb
SHA1

4da4ccc8af9b76d8b0e54aacf611437621641d21
SHA256

ccd4f31d9788b7e42092781ff45454adbb8986bf7dabf52a2814a3e6fafa4d2f
SHA512

a9213ef139bd53f196e359f5145a159e5099231d240bf25c0cddcca1d21b6065a133d22ba100698e5cfa949480d5983b9bb9cffc5455574d5e9072439158c1e2
SSDEEP

1536:DeEKJtvT2+/D4uWBsKmLVFxnlBDdq2Tk7VSe:DmXvbkuWZ6ZBwT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CryptedTest.bin.exe

Files

CryptedTest.bin.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ