SecuriteInfo[.]com[.]MSIL[.]Kryptik[.]XSWP[.]tr[.]19238[.]2337 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.MSIL.Kryptik.XSWP.tr.19238.2337
Size

618KB
MD5

0b223c309e4f436b0d77d4769d4f801d
SHA1

5fc5ef6d1099628fd39214d17ecc617c93625d90
SHA256

8aa45aeb261a9a25275b66febcde0b57f624536c795d4b751d801bb97cee2cc9
SHA512

d1432910faad7eb7398e980fa894d72a8764d2185f9507fbea62a389e6941db3be68feec21dfd73fb421f6e6cb4b8f99402d5e164ff75632903198658e9c3f46
SSDEEP

12288:mJS23Pn3lkefbLaLTH4MvGZJ0EayS9evPol:mGoaYuGLdaDH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.MSIL.Kryptik.XSWP.tr.19238.2337

Files

SecuriteInfo.com.MSIL.Kryptik.XSWP.tr.19238.2337
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 602KB - Virtual size: 602KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ