DeathCrypter-0[.]8[.]0[.]exe | Triage

Sharing

General

Target

DeathCrypter-0.8.0.exe
Size

5.8MB
MD5

fe35580ad68344813946c7ac56f2d004
SHA1

407cbb184834ea4b379b082493359d513da62138
SHA256

a1351b3dbfc2dc4eafaad6f94cf007c3922ea57c69a89848c0bfb6ef93ee2c4c
SHA512

2f22217dabd8e85fa3d99f14feae3f781d5213ede6505c2acb6890cefc0ff45cbb163e015f1c084e3bc6cec627943211268ef2f07089df894cc854bc3256f236
SSDEEP

98304:NTz3yXmUTHPcIUwjCaZQHlt15lxy1N7PUB+4LIN8LijNL/MdYgFz/G/d3XQu9Ljl:NTz3Omg9UwGwA75n+N7PUBHlLWZAXz/c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DeathCrypter-0.8.0.exe

Files

DeathCrypter-0.8.0.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.m{,
Size: - Virtual size: 6.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ax0
Size: 5.5MB - Virtual size: 5.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 266KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ