Static task
static1
Behavioral task
behavioral1
Sample
CrystalDecisions.CrystalReports.Engine_JC.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
CrystalDecisions.CrystalReports.Engine_JC.dll
Resource
win10v2004-20230831-en
General
-
Target
CrystalDecisions.CrystalReports.Engine_JC.dll
-
Size
364KB
-
MD5
413b2479f34e97c82c710d69fc593f14
-
SHA1
3fcd4b8e2e98cc96081d6f3e596f8e6d1b2ad8c2
-
SHA256
12a30dd6b8b278485dd209c323fe2e6dd8db4467eb5deb6ff81cf527e891b575
-
SHA512
e7bb6da8a9d7a13ed6481ca51b364ccefc4dd236dbc32d09cab2bbe8ad8d89956a23f200281b8ddf054e159237eac6734132c5b7fe63fddc29fb8a325213a125
-
SSDEEP
6144:KWC1chU1kY3tO8ZLogS/ILLYQyE8ILS08/fXshVjGVFGaunt:s1cWPtn9LcQyEm08/fAjW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource CrystalDecisions.CrystalReports.Engine_JC.dll
Files
-
CrystalDecisions.CrystalReports.Engine_JC.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 352KB - Virtual size: 350KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ