___ HOW TO DECRYPT __[.]exe | Triage

Sharing

General

Target

___ HOW TO DECRYPT __.exe
Size

78KB
MD5

55cb627f9925b52bd5ae0bc5e5188bcf
SHA1

858c350062bde8644d89113697a1b9b38ec91714
SHA256

2608e3aee2ca61701eb8b5281b9c9f25f84f40faf3210b2cdaa188d798345a3c
SHA512

93d4d1528f7c13374e4e91aa6dcb9c0e2c1149b00ff15f43c0353bee568bd8287085e7ca7b5eadeaa015b4b2052c2462bec1598e595a98af847b2772e14549c3
SSDEEP

768:kB2VPYX/Adl1d2+TjWUmtjt4czvp5vJvi5JNFGgP7L:kBNX/Adl1djBa+cTpqbGgTL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
___ HOW TO DECRYPT __.exe

Files

___ HOW TO DECRYPT __.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ