Zeus Crypter[.][.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Zeus Crypter..exe
Size

432KB
MD5

0861028d352941c03dca3fe7be6789ef
SHA1

fd1273a2a4beac165e9c12f81394331c6e8b7a61
SHA256

e1c8c3dac6e3f1993a359b5660dc37a1d13be958f93098af5029d1560630afc7
SHA512

5ac79e9eb6238e79884f016559253df69dc18eb27006e06228956063d0d9bac5425e2e568bc34c58df31d04877eac89f73672fb7553a317896cf72d98a6f251b
SSDEEP

6144:9Y3IbgXLoFfPeQSaiYfTlhYSErgJWRGRk6RLWv/56/krhm7kvIyuiCJogJCGfc:cIkXkllpliLsQRGRkz5Hm4AB/2gJCG0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Zeus Crypter..exe

Files

Zeus Crypter..exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\JHinformatica\AppData\Local\Temp\52sk1big.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 384KB - Virtual size: 380KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 107B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ