Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.CrypterX-gen.26068.27551.dll
Resource
win7-20230824-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.CrypterX-gen.26068.27551.dll
Resource
win10v2004-20230703-en
General
-
Target
SecuriteInfo.com.Win32.CrypterX-gen.26068.27551.dll
-
Size
2.5MB
-
MD5
1c524e39659c8e189c4947c66599a511
-
SHA1
1006d5b35d5952d4b9888ed935f174de88908984
-
SHA256
84984a52341753bae399fb43653b99a83985bfa12a6d4ee9f09229cca23138be
-
SHA512
a5440dd00762f827156526f7c14ffd3f60ea01bd824ad6abb2e4e0f24e4b47c02fb14ebbefdab4774375c255df30608e2223418f336e352cd057f487d06cc1ee
-
SSDEEP
49152:Du041P1+kvbZ7c8DEm6q5k5rZdIJG6kmSLHHcD:/MBDZ7c+KPIkdmMnc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Win32.CrypterX-gen.26068.27551.dll
Files
-
SecuriteInfo.com.Win32.CrypterX-gen.26068.27551.dll.dll windows x86
3cd8fa62cbb1d74f465b60130b9d6652
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
rpcrt4
RpcEpResolveBinding
ws2_32
WSAGetLastError
advapi32
RegCloseKey
GetSecurityDescriptorControl
kernel32
InterlockedPushEntrySList
TerminateProcess
WaitForSingleObject
IsProcessorFeaturePresent
OutputDebugStringA
GetModuleFileNameA
GetBinaryTypeA
GetModuleHandleW
IsDBCSLeadByteEx
AreFileApisANSI
IsProcessInJob
FindCloseChangeNotification
user32
GetUpdateRgn
IsDlgButtonChecked
CloseDesktop
GetWindow
WaitMessage
IsZoomed
SwitchToThisWindow
ReleaseCapture
DeregisterShellHookWindow
ChildWindowFromPoint
DrawCaption
TrackPopupMenu
gdi32
SetBitmapDimensionEx
StrokeAndFillPath
Sections
.text Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 352KB - Virtual size: 350KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 912B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ