crazyCore[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

crazyCore.exe
Size

29.5MB
MD5

dba91ebf25d7b81e93f6f7cdc902d1da
SHA1

2775881bcd87d961aaaa671209c6a734feb2e171
SHA256

911b53329da46fecb6b4f86cc3276b9fa0a5fee7c83cb2c12677021f1374ac37
SHA512

8ca204f356d52d6c5849a751760e29bc1b6c774a0bee82c4b4b144f764ded7babeb0ba2ae722fb3a212b3750b0e5b4e6cddb7fc647094eac6f18a36279796318
SSDEEP

49152:KelaraJaKavkCTvZiN4ZD3RhVKpB8EJNkpSbZgXSPp3lJkCVc5vD1U0BPvmJWjnS:sDW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
crazyCore.exe

Files

crazyCore.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Primary\Documents\Visual Studio 2022\Repos\crazyCore2\crazyCore\obj\Release\crazyCore.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 29.3MB - Virtual size: 29.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 201KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ