Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.MSIL.GenKryptik.PWSX.tr.31794.exe
Resource
win7-20230712-en
General
-
Target
SecuriteInfo.com.MSIL.GenKryptik.PWSX.tr.31794.24352
-
Size
592KB
-
MD5
b4514c6314c651cee8d543e916b4eca0
-
SHA1
521bda730b2b340e88ddd5f8c19b4994088bfb62
-
SHA256
57a70c86b99cac6435ffc0fc3c93957ece656f9d92061a4ad7e06c531c0bbb4f
-
SHA512
4f1b0ac43a5f174389c69909588bcb59597ca0825d4e3b72864a92c5c557507b47c606fc7e5319d8b17c5ea33264025d90ef60f68f79ca764a18a3c0659fe0df
-
SSDEEP
12288:mTQmGPdzXjTXKJsEXzqIOJA/8xmBkQQy3kOCxj:nmG9XjTqzqID/8siyjI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.MSIL.GenKryptik.PWSX.tr.31794.24352
Files
-
SecuriteInfo.com.MSIL.GenKryptik.PWSX.tr.31794.24352.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 586KB - Virtual size: 586KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ