encry[.]exe | Triage

Sharing

General

Target

encry.exe
Size

28KB
MD5

eeadc486ffe0228accb2a2a0bdb22732
SHA1

7be79a324e562291eed3420a74f1af2f244fec49
SHA256

d9bed1a2f69d9c144006a97ee6eedaaa9cd94960a93d39aa2c7bc59e17527163
SHA512

9a434bafd13de54da7599b49a8b37915320b2dbebc13ff25df30d992689a127902070faa52fbfb907d8c261661afff32f5a78643aa204354a7711c65f67e71c0
SSDEEP

384:gi38jc843wCYbMjoJiAmDSeruVrFJgd5oOxAdP4CuP3rMuvvCbsNPrm7cyK:tdfG+Ser8rF+d5oOxggjLCs1WcyK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

encry.exe

Files

encry.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ