crys
Static task
static1
Behavioral task
behavioral1
Sample
991b0640730d0260d12ef4262fb1c2c49695627c36f04e75bc6934700e5d5691.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
991b0640730d0260d12ef4262fb1c2c49695627c36f04e75bc6934700e5d5691.dll
Resource
win10v2004-20220812-en
General
-
Target
991b0640730d0260d12ef4262fb1c2c49695627c36f04e75bc6934700e5d5691
-
Size
4KB
-
MD5
6b9dd3fcf8529358ebe81ea6e6941ee2
-
SHA1
40cba42f250f7e24bfa7090c886b84133d5cff48
-
SHA256
991b0640730d0260d12ef4262fb1c2c49695627c36f04e75bc6934700e5d5691
-
SHA512
f033c6ffc6312221349c34e0738ef2e066af8924ba814794b2bcaeca24247d33b84e327a3ca608bfef44d988a2767d02944e0f80cd915eb5e5510b533a65f375
Malware Config
Signatures
Files
-
991b0640730d0260d12ef4262fb1c2c49695627c36f04e75bc6934700e5d5691.dll windows x86
6b7704817c2e8ab31b07140c6b33d44c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
CreateFileW
VirtualAlloc
ReadFile
Sleep
ExitProcess
advapi32
RegCloseKey
shell32
ShellExecuteW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 545B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ