titan_crypter[.]rar

General

Target
titan_crypter.rar
Size 15.0MB
Sample260815-1cldfavtex
SHA256 d57a1d6b0fce47927ec61595450218df2fd1c5786457263fc41eb964a8ddab32
MD5 7464138a28c3a2bda456bb19d9935aa5
SHA1 aa623fefa70428ed8d2ce3eb0bd54ca2b1cc8cd0
SHA512 392a8e2a22a5d25831cd2ae59e57601178ceae89778829eb5038561479a13e9a9a8fd55ecab68837e9890d5ef33bf524b8d0f491d931ce3b6883c30953111d7b
SSDEEP 393216:j8gFIeWqEwQUIbfh9sR/Yk42CSRsbsS8zydkKmtm1o5:jNFTdE7UGXsR/pC3DfMR5
TLSH
T17EF6337F8E42169140E21D9D730FD43196E278CA13E77B44BDEF0B7ED1269B44A8AC49
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Titan Crypter/Patch.exe
unpack001/Titan Crypter/Titan Crypter.exe

File Explorer

titan_crypter.rar

.rar 15.0MB
Titan Crypter/Patch.exe

.exe 445KB
Titan Crypter/Titan Crypter.exe

.exe 18.9MB

titan_crypter.rar

SHA256 d57a1d6b0fce47927ec61595450218df2fd1c5786457263fc41eb964a8ddab32
MD5 7464138a28c3a2bda456bb19d9935aa5
SHA1 aa623fefa70428ed8d2ce3eb0bd54ca2b1cc8cd0
SHA512 392a8e2a22a5d25831cd2ae59e57601178ceae89778829eb5038561479a13e9a9a8fd55ecab68837e9890d5ef33bf524b8d0f491d931ce3b6883c30953111d7b
SSDEEP 393216:j8gFIeWqEwQUIbfh9sR/Yk42CSRsbsS8zydkKmtm1o5:jNFTdE7UGXsR/pC3DfMR5
TLSH
T17EF6337F8E42169140E21D9D730FD43196E278CA13E77B44BDEF0B7ED1269B44A8AC49
MD5 SHA1 SHA512 SSDEEP TLSH

Password

chilly

Titan Crypter/Patch.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 e10a3279f271ae52aff7ff1c92002ceda7839cc5ebe3e4e1b2adc4293ef22a42
MD5 1ad39b6a0a231aa498a4b56aabfc47e8
SHA1 f0c9f80f7449d64c986a8d182dcd0d3a0f6abe9d
SHA512 678e050bf36ab0a83d05b5212c00f161a7b19cb17d3d1a50abe68586dfea053e2e9105f3536574f7c956171f6a793f68710a951e05e93fc96626fb3d2a234eeb
SSDEEP 6144:QupYYCrnhpf6xGjSUIlhlhf0hycAGEjk39mvsoUFhp/kVHeaTvvWb8hUIaxNKkHB:7RCrbfGnWycAGevDUjJkVeaz88hNkXx
TLSH
T100A4D01616EBE446C2CB03B9E146C09097F389F1F597E3B3240525FBEE32F96490666B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

chilly

Minor OS version

0

Major OS version

4

Entry point

238411

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.#=L

Size

Virtual Size

201KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.RA

Size

512B

Virtual Size

8B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.XdJ

Size

373KB

Virtual Size

373KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

70KB

Virtual Size

69KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Titan Crypter/Titan Crypter.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 bd0ad167c1d53a22833d968a25053cd368a11566086cee3bfc485fa6da2ea4f9
MD5 d8a964fb1f0fd6468830212434096c68
SHA1 c6f94de343cd7d303fec408b1781a9d034633f66
SHA512 1b00d4102a18166761c0a7af23ed4b2c6ffa16467064b80b9fbb5680ee0888484ebccd371e0fe762c46284591d010b1879c11fc7e209ae1623555f4766b4736a
SSDEEP 393216:g2vVoP40kuP2trLT5I582ghtPtW0oBmVx27wBwU:gyoVr2LI58dhttW0M6
TLSH
T18017CF386F48FBB18D109BF10297865183F11CAD5370922F4E2969ACFBD39B7A785D81
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

chilly

Minor OS version

0

Major OS version

4

Entry point

19816030

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

titan_crypter.rar

Titan Crypter/Patch.exe

mscoree

dotnet

Titan Crypter/Titan Crypter.exe

mscoree

dotnet

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

titan_crypter.rar

Titan Crypter/Patch.exe

mscoree

dotnet

Titan Crypter/Titan Crypter.exe

mscoree

dotnet