Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.MSIL.Kryptik.XSWP.tr.32494.719.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.MSIL.Kryptik.XSWP.tr.32494.719.exe
Resource
win10v2004-20231023-en
General
-
Target
SecuriteInfo.com.MSIL.Kryptik.XSWP.tr.32494.719.exe
-
Size
546KB
-
MD5
769c25a9119112b6f5dbe978e44dfa3c
-
SHA1
320e482f35657671dc14f40a9b64fadcd46e944a
-
SHA256
5492a2e8a3516bb11e940265f77042f9a2fefdb282f54665b46aff69b6fa22f4
-
SHA512
c11103c28a28715bbd739828342a087cf9ccd1e4efae39ee6603561f510cd26515ae2d23af35475e245bc01325283f5353a19b781bd223a220519fc7e72b1deb
-
SSDEEP
12288:xH/ICtJaOd9nulUEY2UhktPAXLRJaOYXGjgSg9:yKEOd9nOUETwVJZjD4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.MSIL.Kryptik.XSWP.tr.32494.719.exe
Files
-
SecuriteInfo.com.MSIL.Kryptik.XSWP.tr.32494.719.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 530KB - Virtual size: 529KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ