Static task
static1
Behavioral task
behavioral1
Sample
crypt.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
crypt.exe
Resource
win10v2004-20240508-en
General
-
Target
crypt.exe
-
Size
112KB
-
MD5
ff6d027acfc76b774663aac4fcb255bb
-
SHA1
7d2c58bfb00a24736cbc8e9a0f7ca7a0238a9fdf
-
SHA256
1f6129b1a4b2d87624e700e98e3d69d63cd40e381d26be0f0b81d83c73bb1588
-
SHA512
72427e4fe3a1bc929052ae9fb51d5fa906d5f906bae3c1993c176ef60f0f3b9c78adf3f7655d10ee5af42a601b12645f327b44c4e5cd0a08c767dde7878ca88e
-
SSDEEP
1536:peOlcTDBGBtZl6wLcd0b52+JC8wvQSaOQgeaCLENAfbF/NezytJICHRd/b:QOuTDgZlPodk52+wqObeXENgFgs/b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource crypt.exe
Files
-
crypt.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 110KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ