crys
Static task
static1
Behavioral task
behavioral1
Sample
2fab91472c867b27e3980230af49e347a8d62e921eb6a099937f166aa000fa94.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2fab91472c867b27e3980230af49e347a8d62e921eb6a099937f166aa000fa94.dll
Resource
win10v2004-20220901-en
General
-
Target
2fab91472c867b27e3980230af49e347a8d62e921eb6a099937f166aa000fa94
-
Size
4KB
-
MD5
5dadfae9ba54fdedbdd70b1eb4d182f9
-
SHA1
c825a22d7402caed377a3b7f836ef5209661b77d
-
SHA256
2fab91472c867b27e3980230af49e347a8d62e921eb6a099937f166aa000fa94
-
SHA512
97d1d5a15c76012dd28fb176cebecb56fb3de83d0fc55f107a79347842073796788e2799e947ba4ddf7a61dc8be651b5578e444def6a6df6bd39349e431c1f69
-
SSDEEP
48:SKLA9oyTnXz+ihZjuHbKwktByzit5FcY1fcAA181MDnpw:eTnXzvuHxkt3to60An1yw
Malware Config
Signatures
Files
-
2fab91472c867b27e3980230af49e347a8d62e921eb6a099937f166aa000fa94.dll windows x86
e97a70102cce77bfe0dc571cb46a4352
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
VirtualAlloc
ReadFile
user32
MessageBoxA
shell32
ShellExecuteW
msvcrt
_adjust_fdiv
free
_initterm
malloc
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 558B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 486B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ