f65cf86f9ed5b100a2bb8c5190a139b4_crysis_JC[.]exe | Triage

Sharing

General

Target

f65cf86f9ed5b100a2bb8c5190a139b4_crysis_JC.exe
Size

92KB
MD5

f65cf86f9ed5b100a2bb8c5190a139b4
SHA1

acf8b73a3a23a5ac4775637ed1b2d6e24e717376
SHA256

9b310769ef84dfbc6ee758aff4d292d4e8c2a436bac53e050ed3239bfb439333
SHA512

e7c2297f2c7c8d00b4d48a136b27d32f53d835a5fd4f9e1d05f9ae59d4fb28e1761ca25186744a681608ab91b6abdbbc1833273389ebcc9069e44629c9eb333a
SSDEEP

1536:mBwl+KXpsqN5vlwWYyhY9S4AcpJHGEMWFL9myVFJcMD7ehoSzGD1R/4/:Qw+asqN5aW/hLSxnZ5j9lSzgDE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
f65cf86f9ed5b100a2bb8c5190a139b4_crysis_JC.exe

Files

f65cf86f9ed5b100a2bb8c5190a139b4_crysis_JC.exe
.exe windows x86

f86dec4a80961955a89e7ed62046cc0e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
WaitForSingleObject
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetLastError
EnterCriticalSection
ReleaseMutex
CloseHandle

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE