Static task
static1
Behavioral task
behavioral1
Sample
CrystalDecisions.Windows.Forms_JC.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
CrystalDecisions.Windows.Forms_JC.dll
Resource
win10v2004-20230831-en
General
-
Target
CrystalDecisions.Windows.Forms_JC.dll
-
Size
528KB
-
MD5
e3136a79c5c1a3b51e9e6fdbb7fa5d16
-
SHA1
bbafe349452f4c63b8296fb4c16a7d67de689563
-
SHA256
9f0fcd61e088c58001f4b74feebaf83712b7ef8d597b8dce373029f7998103e3
-
SHA512
2aa4b36c8a18c723f31f88929e0cb291f7ea97fcd649b203c4e112e89b689c850a04aef040a0bfa47c6a596406d5fc934e2ca8130f8232d194d951c9bfaf3e51
-
SSDEEP
6144:nvTtXmT3cTb4olDj2+90VJgRZC1lI7d1DDiwBWm6BXb/iOVR:v93hR2lGGIxQQWlBpR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource CrystalDecisions.Windows.Forms_JC.dll
Files
-
CrystalDecisions.Windows.Forms_JC.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 516KB - Virtual size: 515KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ