Crypted[.]exe | Triage

Sharing

General

Target

Crypted.exe
Size

1.6MB
MD5

c0fcb8830ec9e00070f63974060cd887
SHA1

a621a52cee8bd3328dc821f653d448b6810aa6d5
SHA256

40bb9093ffab732df5aab3886aaf7e446845a662e6ea50f23a6d5e4680a6320f
SHA512

e9a6d0b5c68cd36770f0603d04e3e93af32af3059b88d4c92d0f4cf4364e961f5fa10fc720c7c3fa7517b664b353dadd2dfb00ddfac6b746046ed92e6224a56c
SSDEEP

24576:CAubkkXBj9lIIPV46rAo+8i0oSjWh8UboKSe0qVuVLYXLoeXe1PZHp1G01:CBNzpWm3y9XWEI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Crypted.exe

Files

Crypted.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ