Wizard_Crypter_cracked1[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Wizard_Crypter_cracked1.exe
Size

9.9MB
MD5

332cd84569d74906f36d8d9325ed5902
SHA1

96d7535598daf0b6d31c1d5468b55396838712c4
SHA256

7c8b490fd35ba3bcbb79edb42b509057ba4b6f6b7fe5a68c85ee4c938ba0bfed
SHA512

ec8818221061242ef44860adce96ba5334a7f9fcbd167a230a6be76829cdb5625f7d02602e5022999912815ae779fd464ab19ca7dcaea0f74bf2ff7682d0c7d9
SSDEEP

196608:96YoDX8o5uITKWq8XkHd1NQdZS5XZTJt2tM:96r3WWq8UKdZIXZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Wizard_Crypter_cracked1.exe

Files

Wizard_Crypter_cracked1.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9.9MB - Virtual size: 9.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ