crypt[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

crypt.exe
Size

106KB
MD5

2c2e4be673d6a4af0098d8431451fae5
SHA1

7a5db54514cb05b8fbbcfc52cb1c3556d64b51e8
SHA256

5d30d7f66ed8cec17fbe08afb0b5bac7492ce09549c99418f3cb7c716c799b4f
SHA512

c98c7b40fac15d810408c22969f1aa6ae4790efd708c0e2f27b4e2aec0c032cc52c9adb2261c6f9eec025cb7a10ad12478964d9e80123fb9db6731bed0e8e14e
SSDEEP

3072:l8B36rFZEBBntgcEAJaDgCmYtg6l4w9aqw48L:CBu3y7gYJaDg+taw0v4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
crypt.exe

Files

crypt.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ