Overview

overview

10

Static

static

9

053f8d5670...61.exe

windows7-x64

10

053f8d5670...61.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    053f8d5670c666f54c76fc8f3273ed916b1c323bc1a6c71a13f9f02a4746a061
  • Size 1.0MB
  • Sample230830-yzccyaaf47
  • SHA256 053f8d5670c666f54c76fc8f3273ed916b1c323bc1a6c71a13f9f02a4746a061
  • MD5 SHA1 SHA512 SSDEEP
Score
9/10
cryptonepacker

Malware Config

Signatures

  • CryptOne packer 1 IoCs

    Detects CryptOne packer defined in NCC blogpost.

    cryptonepacker

File Explorer

  • 053f8d5670c666f54c76fc8f3273ed916b1c323bc1a6c71a13f9f02a4746a061
    .exe 1.0MB

053f8d5670c666f54c76fc8f3273ed916b1c323bc1a6c71a13f9f02a4746a061

  • IMPHASH 1c3600c8cacb95d648e36f41e2534ceb
  • SHA256 053f8d5670c666f54c76fc8f3273ed916b1c323bc1a6c71a13f9f02a4746a061
  • MD5 SHA1 SHA512 SSDEEP
windowsx86

  • CryptOne packer

    Detects CryptOne packer defined in NCC blogpost.

    cryptonepacker

PE Signature issue

Digest
91:74:d9:39:69:fc:43:e0:47:92:7d:bb:2d:c5:81:b2:c3:5f:a7:2b
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=EJJITOWJDYSFOZIJDD
Chains

Aug 30, 2023

Minor OS version
Major OS version
Entry point
12032
Magic Number
267
Subsystem
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths