Lightning Crypter[.]exe | Triage

Sharing

General

Target

Lightning Crypter.exe
Size

1.5MB
MD5

0375404630a8d32741cf68aa40a56118
SHA1

86546b943b459c7794e1b5bec7869149e99ff6a7
SHA256

51b92944c3c83b9bbe62d3d79d92f9a5673f18c7cbf3579d9576f02323fc10c3
SHA512

a4c94ab5d63f572f661fc4aa007540e6ca0e0db1d0f713ca4a96dd24b28e1fd360b38fa9b20298abd65f972d7ac4bd58ad23a4c3560c271bfe5fd5ae9603f17a
SSDEEP

24576:Ov5aBrxbkXgPy7Zace/a1jtw4i1VqyM0QAgoSgRbR0UMF9cx91MZfA/nYUDhJcUk:OxGmXWy7ZC/utjEM0QwSgd+UMF9cvqZh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Lightning Crypter.exe

Files

Lightning Crypter.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ