CryEA[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CryEA.dll
Size

175KB
MD5

f7cd1b54e619e20add6d40148e301e59
SHA1

88d9d6015e4207aff8fb3a5d91c4003c2216f2f1
SHA256

28427a9e2a82ac09abe6b8f662f722de1f38ad71a05dc3d3d9f14d675e266e6a
SHA512

36a4f10afceba9fabdaa790d7251dd28d398fbfb8ee6a3b613c8b1586d448bcf70a1c63609af805719aa9598fee3b64b821562f9b885a30dd15610ef5cb5c3af
SSDEEP

3072:oTH/E62xVC80KZ6SGNGJtHwkC48pPvVBOj5BQJ1BzJFkYLs2KZAtgPF1Pio:eH862xVrDZYCJVCPV2BQDHFkYBw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CryEA.dll

Files

CryEA.dll
.dll windows x86

8c797522dbef30d479a79c71abaa4f9a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryPerformanceCounter

Exports

Exports

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CryEA0
Size: 1024B - Virtual size: 930B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CryEA1
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ