Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.MSIL.Kryptik.XSWP.tr.25057.19846.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.MSIL.Kryptik.XSWP.tr.25057.19846.exe
Resource
win10v2004-20231020-en
General
-
Target
SecuriteInfo.com.MSIL.Kryptik.XSWP.tr.25057.19846.exe
-
Size
620KB
-
MD5
f4fb995cb3c38386a790e906203c0007
-
SHA1
e24f6332dda5068b50a5068e25ff19daad62d1ac
-
SHA256
ece31da76b37606927d63abcf67181938c57bca5d62714a4164e7e8da4d36e23
-
SHA512
1ab18af554ef8e1aba27b962bda199cabb513cae2b64cfe2b34bb18b988e8e58133fab4b771e50cb909735921ec2fd4ec88631595a60217522ef58b98bf9b1ef
-
SSDEEP
12288:dXY7/c9R8AgDpMS2ELa7DW7ViOA+/9BNLfGVMvySOq:dI7/c9VoKi707+/9BUnq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.MSIL.Kryptik.XSWP.tr.25057.19846.exe
Files
-
SecuriteInfo.com.MSIL.Kryptik.XSWP.tr.25057.19846.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 604KB - Virtual size: 604KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ