DeathCrypter[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DeathCrypter.exe
Size

10.1MB
MD5

6ec7ca438f46a517bd8d2c89b995643b
SHA1

e457571e28e0efa911b0f62ae6dde4e809f7b331
SHA256

b651b3f78a1b32f6d0bec0c7aa9a270eb64b35df825cd0f920749fbdc337c318
SHA512

0f50c125984ccab273fa2bf4b7ca3cd1aa0c92e36d7eaed217dc26258524c662299dda631053ef6ebb2eb78a62edf22af9400444d0518f0e1f3f0f74cea6b0e5
SSDEEP

196608:2l5SZwda7o6uImw5KhXsHBBI1wa3iOVXVEOME/ZxUtGJBhvGCNBT:2l5SwUEhwKhXsHBBwwjOVF9M2ZxTXT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DeathCrypter.exe

Files

DeathCrypter.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10.0MB - Virtual size: 10.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ