Value Decryptor[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Value Decryptor.exe
Size

1.0MB
MD5

285004f743d2aad59040ede1b1029ac4
SHA1

c0ff5155341e0e695c22f9753af465f2ad02fa36
SHA256

0bd7de2945472da6460bacc42d68fc5df920546069127ff0b100693214b06a77
SHA512

616b6ad6d71d1daa0629dbc84675921f4ab6d1074ab4db97f00beac66ec19663e9744e19b74baf2c1e2ecf060ffdd7d8fb3f47d3775dda6c56abb441c33ba454
SSDEEP

12288:uMSApJVYG5lDLyjsb0eOzkv4R7QnvUUilQ35+6G75V9NlFKH5o30FOawpF+f4Nps:unsJ39LyjbJkQFMhmC+6GD99Im30QpW3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Value Decryptor.exe

Files

Value Decryptor.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 615KB - Virtual size: 614KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 352KB - Virtual size: 351KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ