Wizard_Crypter_cracked1[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Wizard_Crypter_cracked1.exe
Size

9.9MB
MD5

377394c6f3ed5143cbc095cee10bf39f
SHA1

7a8f4668d55629d2b65fe0ba30ea081034ce5b9b
SHA256

4bd3247f481e842635cb2302402e77e279a6724f2764cdd58b79d1bc6f98691c
SHA512

b9c6ac5495368f21581d4cf42e6fd84850eeb8bc76d815fe4901170eb41939bdfc162a57170909612189eddb96a3746045e6a98633211c0d6708f7b923100a50
SSDEEP

196608:s6YZeumquITKWq8XkHd1NQdZS5XZTJt2tY:s6C3WWq8UKdZIXZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Wizard_Crypter_cracked1.exe

Files

Wizard_Crypter_cracked1.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9.9MB - Virtual size: 9.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ