Cryptic[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Cryptic.exe
Size

13KB
MD5

8be5d35a1acf27c0769ca033ec30e178
SHA1

82f0733c426f28b1881276b17391b332717554cc
SHA256

41b09d2a6f2070452147fefe2dd5e68e8a9b5b5fd2989f219f24e2468888878b
SHA512

9526c3646ff46be6f689664717a2f489443c5f6820fbbb4467b9b70f0d1c7a7a65d42470c3317bd508302369bc0d112fb4f7cc72f48db827ea18e5b63739e901
SSDEEP

384:CczqOFAXIreG/WMgVkdVa6VoA2hvptYcFA/Vc03K:7qOp7ebkdVa6aA2hBtYcFA/Vc6K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Cryptic.exe

Files

Cryptic.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\damia_de0etcp\Desktop\Cryptic\obj\x64\Release\Cryptic.pdb

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ