RL-Crypter[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RL-Crypter.exe
Size

108KB
MD5

b807afc91749a60a266bcc01c258e189
SHA1

da90640d403e11ca943781e66c091414ec5dac73
SHA256

1fe40cb9f03df7f3dc5781375bcc4bd7cb7cbfa78015d416aefa30fd00cbfdb8
SHA512

57d22e90e35a2c7e0e71428d7533945623f290135d35c03c2f2bca2ac033f268351dae7f9ce35140f9e387d015dab357f156839f4e0a7548d36eaa5a425d0c58
SSDEEP

1536:81belNfjDGLLxvPyPgzmeuKnQBYRGplh1caOLqS3WaPVRzg7fR1CQ+uUksgBK:hlByxvP+hZKQua/c53WeTz1Q1B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RL-Crypter.exe

Files

RL-Crypter.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Admin\Documents\Work\RL-Crypter\Encypt\Encypt\obj\Release\RL-Crypter.pdb

Sections

.text
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ