Creed[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Creed.exe
Size

16.0MB
MD5

8ba657d83aadedce2f2e61548484c591
SHA1

a4b4515c14dc998ed4338207340f8a190cfaaf5a
SHA256

226b1ac159948e1cd7e2d608980b5c78c7253c439952c62d793db2cf127771ef
SHA512

8e404293527db4a8670fad88a8181cccf174f74b69e902660c5b061d58bc9a76c492614c5a4e77b0a55919f6f9a7e9f3baa3bf30d040393dd16480c16a41fc0c
SSDEEP

393216:ljOJGh4KnHbjkO2fCzihpf13fJSMKZW65mukS:8JGmA3kkMR13sMg3I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Creed.exe

Files

Creed.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: - Virtual size: 8.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.srewrft
Size: - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.srewrft
Size: 16.0MB - Virtual size: 16.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ