Static task
static1
Behavioral task
behavioral1
Sample
Release/Pegasus Crypter.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
Release/Pegasus Crypter.exe
Resource
win10v2004-20240419-en
General
-
Target
Pegasus_Crypter_1.1.0 (1).zip
-
Size
1.4MB
-
MD5
c4e716714197e2a186a1198d2f430d21
-
SHA1
55a2ecb7dc77c92530525cc1160a1df94d57b343
-
SHA256
3d9824233d39a07c87a20df689f5eefa35dbd88685d01d06a7f98d5df9784dcb
-
SHA512
e123b6a1d7c3b2c23852ea2010fccef8893cdd35e18f090d995fdfa8ab48c872530523149d90f869ee8cad0ba727268b2e567fe8c568da3686f48274327a1c5d
-
SSDEEP
24576:/w4UJRY1Ad+h/UkfADIDa2lmAUd8cOUyrpQI87D9Yr/nApvavQ93xhhUZ4VnMpdr:/wXJRY1AdA/Uq/UhymI89IopQahhM8n8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Release/Pegasus Crypter.exe
Files
-
Pegasus_Crypter_1.1.0 (1).zip.zip
Password: *%^$%&r(*&%^$%#^&FAAIGIGIBBAU4718419874918???!!##@><>>>}||
-
Release/Newtonsoft.Json.xml.xml
-
Release/Pegasus Crypter.exe.exe .ps1 windows:4 windows x64 arch:x64 polyglot
Password: *%^$%&r(*&%^$%#^&FAAIGIGIBBAU4718419874918???!!##@><>>>}||
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Release/Phantom.exe.config.xml
-
Release/System.Diagnostics.DiagnosticSource.xml.xml
-
Release/System.ValueTuple.xml.xml
-
Release/bin/latestversion
-
Release/bin/settings.json
-
Release/dnlib.xml.xml