Cryptic[.]exe | Triage

Sharing

General

Target

Cryptic.exe
Size

10KB
MD5

6c928d5ca6574b87f078aebe93c6f370
SHA1

ea21859803dd31a1f4c2aa4b32b525c078934a34
SHA256

9f8a44f4f56b260c135061d2455eb97e1cf9d27248733b70168f488da51a82af
SHA512

3da5d78d5789558a0fd0c8070c124d7d028fe4f97b79614e46c5330a39d5bf056e9419faecd64f6d0b60dc8061df09b2450d29652c96d29afe5bd1cbe0e0a9f9
SSDEEP

192:zt7nb5dq5YHFtmCd6piPJe2hAWJ6py2bceJDB4mfZ1VT92hS:ztT1Ftmm6T2a6OyUdHZ1Vp2h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Cryptic.exe

Files

Cryptic.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\damia_de0etcp\Desktop\Cryptic\obj\x64\Release\Cryptic.pdb

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ