Release[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Release.zip
Size

9KB
MD5

d34dc635e430dc07ac6b60744f94d690
SHA1

8403637acbfd0c99500bcc786c738caff6a8b79b
SHA256

5d87f0a3b965f27184755352e71c0a4c79fc13972e514db3ad67bc416146f131
SHA512

4e38984074d67b338bc19f8235215b99a64aeda2600635230c71662e4a5ca256d3ed8d3bb4c16c13b8437b9a4d49ca478c16babf62fec2e026dd82808e93ddff
SSDEEP

192:SNLMeaBt78HZD61IWVWO3WkmDoM32Iow6W1qhdYQqT:iYBtYHZD61IFkXc8w6W6dYQqT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Cryptic.exe

Files

Release.zip
.zip
Cryptic.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\damia_de0etcp\Desktop\Cryptic\obj\x64\Release\Cryptic.pdb

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Cryptic.exe.config
Cryptic.pdb