Overview

overview

10

Static

static

9

tmpa14ow0cp.dll

windows10-ltsc_2021-x64

10

tmpa14ow0cp.dll

windows10-2004-x64

10

tmpa14ow0cp.dll

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    tmpa14ow0cp
  • Size 615KB
  • Sample260602-h65easfz3s
  • SHA256 9c17c2bc2e06ffb1e6b7cf9ce808cf55f9755e4e337b73c95cea0fa00965da76
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
cryptonepacker

Malware Config

Signatures

  • CryptOne packer 1 IoCs

    Detects CryptOne packer defined in NCC blogpost.

    cryptonepacker
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • tmpa14ow0cp
    .dll 615KB

tmpa14ow0cp

  • IMPHASH 424f9c23d896002bc10da6a82dd8bd5a
  • SHA256 9c17c2bc2e06ffb1e6b7cf9ce808cf55f9755e4e337b73c95cea0fa00965da76
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:4windowsx86arch:x86

  • CryptOne packer

    Detects CryptOne packer defined in NCC blogpost.

    cryptonepacker

  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
4
Entry point
364368
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL
PDB paths