Static task
static1
General
-
Target
DeathCrypter Source Full.zip
-
Size
20.3MB
-
MD5
f4959ef9773a206b2d4f7c10a838f46c
-
SHA1
43a0d3a381013b52ddaa47b70d320187eb2dabc9
-
SHA256
6155416a2e5e653fc957c3a36a59232e19a976624f6d97fb979b030a7b38449b
-
SHA512
08dfa0278f4beea24cf3f461de908091ca310cb107f6ba90a2ce87fabf50022adff474a01adbccb72ade8c99a61110b1b1a0ce84dd45fc6b415d01474a4a94ce
-
SSDEEP
393216:b/i5kr/1lVn4OrBB70IJdRB9IYYzilXUxJNaVlc5u7gByC9DcIGKt8ibRARrTE26:eutHtrB9pnRPeJN9878yC9DbGoRinE26
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/DeathCrypter Source Full.exe
Files
-
DeathCrypter Source Full.zip.zip
-
DeathCrypter Source Full.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.e_0 Size: 8.9MB - Virtual size: 8.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.R6> Size: 9.7MB - Virtual size: 9.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 97KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ