crys
Static task
static1
Behavioral task
behavioral1
Sample
5387a3f5102fe0026ab66f3fd9cd34cf3ba94043104467f20a8ae5ae82f5f3b7.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5387a3f5102fe0026ab66f3fd9cd34cf3ba94043104467f20a8ae5ae82f5f3b7.dll
Resource
win10v2004-20220812-en
General
-
Target
5387a3f5102fe0026ab66f3fd9cd34cf3ba94043104467f20a8ae5ae82f5f3b7
-
Size
4KB
-
MD5
80fc91af71a1d2ea88f312eb603cf550
-
SHA1
b8adf2f7a84d3acb9566dd457f234b3a36c054d3
-
SHA256
5387a3f5102fe0026ab66f3fd9cd34cf3ba94043104467f20a8ae5ae82f5f3b7
-
SHA512
c8af760366638529fc19350326b9846f12f83e4aede840b77b1a58b020f985b75883b762e4ad62e8b7dc5d8f8148db6f24d5d6671312224cb278a8d749b36044
Malware Config
Signatures
Files
-
5387a3f5102fe0026ab66f3fd9cd34cf3ba94043104467f20a8ae5ae82f5f3b7.dll windows x86
6b7704817c2e8ab31b07140c6b33d44c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
CreateFileW
VirtualAlloc
ReadFile
Sleep
ExitProcess
advapi32
RegCloseKey
shell32
ShellExecuteW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 545B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ