Cryptic[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Cryptic.exe
Size

13KB
MD5

7c66c3e9f9c9b60441ef3793bb7c9a7e
SHA1

a89af7325454b399beaba9b20e78723c7e79a955
SHA256

479ceef265b238d36c5387f40556eafae2c189041d8063fe7f090afb65f40ff9
SHA512

cdb92d8a2dca17033e228f2f5c3ebdd6c7a565ec003bab0f27462234012ad27a469a2324c0ca6bbbf82745a302a917020093bdfc36715a26ada2476e8e7ab3db
SSDEEP

384:Ge3JE1bkVvG/WMgVIYh9V62hvptYcFA/Vc03K:NEtebbh9M2hBtYcFA/Vc6K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Cryptic.exe

Files

Cryptic.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\damia_de0etcp\Desktop\Cryptic\obj\x64\Release\Cryptic.pdb

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ