Static task
static1
Behavioral task
behavioral1
Sample
DarkCrypter2.1a.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
DarkCrypter2.1a.exe
Resource
win10v2004-20250129-en
General
-
Target
DarkCrypter2.1a.exe
-
Size
4.4MB
-
MD5
9d4c4dccaf0b326d53d28486caba0695
-
SHA1
dab4f18ce630e70ddeb13cc15e6ce49a612c9659
-
SHA256
357a5929cd1b2559b2a50320b4ef80b4f0b004d2aaa40b139888b848fe1cc0f8
-
SHA512
f639c4e3f58b08ea33a0576da409a6a3c7d30d525ff7a9e23da4fe55890f860baa08b434eccc2332628ab8989ecaf0e995767df433b10340d1f053032371f458
-
SSDEEP
98304:CQBZnWAWcWbFbIpvObbzkn/wYOjhGcwkn39d9Iq1sqZ26m/zItUxsbb:xWJcYbcObbzk/wYA8md1sqZ26mstUxs
Malware Config
Signatures
Files
-
DarkCrypter2.1a.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
22:c7:ea:e6:93:27:c2:8e:4f:cb:03:db:05:04:1f:eaCertificate
IssuerCN={A0590F5F-B8C5-40EA-B2DB-F9768118E7C8}Not Before03-08-2022 23:22Not After04-08-2023 05:22SubjectCN={A0590F5F-B8C5-40EA-B2DB-F9768118E7C8}22:c7:ea:e6:93:27:c2:8e:4f:cb:03:db:05:04:1f:eaCertificate
IssuerCN={A0590F5F-B8C5-40EA-B2DB-F9768118E7C8}Not Before03-08-2022 23:22Not After04-08-2023 05:22SubjectCN={A0590F5F-B8C5-40EA-B2DB-F9768118E7C8}a3:64:51:4c:5e:1e:8d:1d:07:4c:e8:3c:0b:fd:1a:c4:69:5c:f1:e2:84:7d:4b:ae:ef:0f:4a:dc:d8:e9:e4:22Signer
Actual PE Digesta3:64:51:4c:5e:1e:8d:1d:07:4c:e8:3c:0b:fd:1a:c4:69:5c:f1:e2:84:7d:4b:ae:ef:0f:4a:dc:d8:e9:e4:22Digest Algorithmsha256PE Digest Matchestrue34:24:ee:3e:3d:6a:56:5e:3e:d7:76:0d:a1:90:42:21:3d:b4:36:daSigner
Actual PE Digest34:24:ee:3e:3d:6a:56:5e:3e:d7:76:0d:a1:90:42:21:3d:b4:36:daDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4.4MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ