High Life Crypter[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

High Life Crypter.exe
Size

2.0MB
MD5

cfb30f9edd5db91983e7d2961899f474
SHA1

8125c2b8024246886de949e6c64ee13b7f0bd2f7
SHA256

223d7f57a627bfda21127e627ec08ff97072601d95fa1da3e17d1db8d9809ee0
SHA512

6e63bb1c4e164d25661718b149c7e925b0453b2f720667d0696e00cc48c3f7f098426a094db77499f750d2fc2da1dcb5f512b8eb3cb34b20ad20e5ebdf4b4bda
SSDEEP

49152:JBrKdd93glK0xnCQk6M6d9hSLP1hnF+vxD+A9ZYMX2:zrg9r0xnCqM6wP1BsvwU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
High Life Crypter.exe

Files

High Life Crypter.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 266KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ