Cryptic[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Cryptic.exe
Size

15KB
MD5

d3c9cc9bcafa92566fd3113749e673a9
SHA1

8a49fb428be5e0f6cbd20b6b1bdacf8be019d998
SHA256

8e8dd9654d3b6f3a224f069b7e884d64d223719952d0dc600fb3f4fd22e2ffd6
SHA512

c736fb30c1ea244334a350df60f2157f407f4533ad2746d778258484a3069e37b8f1d51e1b0adfef5bae3c63087234e747c0bd395498a6078ef15770d1a7f3f3
SSDEEP

384:FZTjMSiuRFISiuRr+kI//6OmJCKsiolGSDV+2hvptYcFA/Vc03K:FZ0SiuRFISiuRr+F36JEioD82hBtYcF5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Cryptic.exe

Files

Cryptic.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\damia_de0etcp\Desktop\Cryptic\obj\x64\Release\Cryptic.pdb

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ