2024-05-20_32e111f83d6a7632172bb89ff9618c31_krakencryptor

Sharing

Copy URL

Twitter E-mail

General

Target

2024-05-20_32e111f83d6a7632172bb89ff9618c31_krakencryptor
Size

1.9MB
MD5

32e111f83d6a7632172bb89ff9618c31
SHA1

e5ab8ff61cd109d828a1a2e128010afdf83106e2
SHA256

787adf536e89683c451e77b284afb8529cfa3ff254d7848b1b197f419399f42b
SHA512

d8f03137c93d5c1d12a62ae3df5e20218de808c78e0645cbd7bcd64f150b68a2b959475bf5918f0a5a4f99a41b74ceaa8827d185a4fc594bb310b308304ade5a
SSDEEP

49152:fnroeqVP1PWlsqlqoZ9O7TIKKYZgHT/42fTOIbMNaf:DpqCvtZkQBY6U2VMgf

Score

10^/10

Malware Config

Signatures

Detects executables packed with SmartAssembly 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_SmartAssembly

Files

2024-05-20_32e111f83d6a7632172bb89ff9618c31_krakencryptor
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31-12-2015 00:00

Not After

09-07-2019 18:40

Subject

CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

de:da:f3:0d:c9:97:cb:5d:af:4e:10:0a:7c:43:8d:b1
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

16-06-2015 00:00

Not After

02-11-2017 23:59

Subject

CN=Aquarius Communications,O=Aquarius Communications,POSTALCODE=2780,STREET=7 Vale St.\,,L=Katoomba,ST=NSW,C=AU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09-05-2013 00:00

Not After

08-05-2028 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f4:4a:ef:03:83:40:66:4d:0f:6e:9f:e4:42:bf:c4:03:91:a9:07:2d
Signer

Actual PE Digest

f4:4a:ef:03:83:40:66:4d:0f:6e:9f:e4:42:bf:c4:03:91:a9:07:2d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

T:\MyCourts\MyCourtsUpdate\bin\Release\sa\MyCourtsUpdate.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0bCertificate

Extended Key Usages

Key Usages

de:da:f3:0d:c9:97:cb:5d:af:4e:10:0a:7c:43:8d:b1Certificate

Extended Key Usages

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

f4:4a:ef:03:83:40:66:4d:0f:6e:9f:e4:42:bf:c4:03:91:a9:07:2dSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 12B

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

de:da:f3:0d:c9:97:cb:5d:af:4e:10:0a:7c:43:8d:b1
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

f4:4a:ef:03:83:40:66:4d:0f:6e:9f:e4:42:bf:c4:03:91:a9:07:2d
Signer

.text
Size: 1.9MB - Virtual size: 1.9MB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 12B