Crypt[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Crypt.exe
Size

450KB
MD5

ed29fc066110f8486155c4f24b2bff6f
SHA1

55563871a113cba79dfbe4181464e146150e6594
SHA256

0c951fbc72c569bb28d8a6ca758050f97832b7db57615ccea79f848eec8339c5
SHA512

fbfa9926aab1f443090a299a25e8ece0c3da80a77b27e38801bbc7af060169d0870c39dee41baf844a1780d7a8ff44bc3187ca1bf4aced816c3866b65e5fc764
SSDEEP

12288:hBPE9PyEyT8oWBKzSmLhLVOleU8sMUAezujeBPT:hRE96EyT89ChLVOJvMsh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Crypt.exe

Files

Crypt.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 448KB - Virtual size: 447KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ