test cryptat[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

test cryptat.exe
Size

3.0MB
MD5

3d519ab9b54b41290a911d85303c41e4
SHA1

647ac8a971b421a4384af22398b78e5f011b66cf
SHA256

c3ade34a9cd48c2761c902b68d23b8b01d41dbe6de1f488c078bb226d181d2fa
SHA512

86c21141343a1386560c5a3d4e064243d08c50951b76efdd383eef50811d2d579329a267a9cb68377f70c470d3fcfa364137d7c1ab36a94712665cc02033357b
SSDEEP

49152:6vTbK3zXLPMovtpV9stzjhN9WeTcnwOEnnqjbD3lURseWMzbIwiIt1lCOzSkPjer:6v3KjDV+Z4wO2YD3+RseiwicjeyC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
test cryptat.exe

Files

test cryptat.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ