Cryptic[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Cryptic.exe
Size

13KB
MD5

4d9567e67d99b36f5714a2e0c1ec6800
SHA1

729371b7ab10c9dd2d602d6feaa5e9b1381ae648
SHA256

cdc1557f7622dcf32436395109e9c7a35143b433d0c8303fef6be8c1506bf9ea
SHA512

a268aa0fac70d298325b1f6fb56f5f2bea6de629852ecd4d0c221a74da9ecc2efa64e0c30833f60104484b17d6553ea75663d86c52e6077ce237d1f69bec1a62
SSDEEP

384:mczqOFAXI9eG/WMgVedxa6VN2hvptYcFA/Vc03K:3qOH7ebedxa632hBtYcFA/Vc6K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Cryptic.exe

Files

Cryptic.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\damia_de0etcp\Desktop\Cryptic\obj\x64\Release\Cryptic.pdb

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ