2023-12-14_d4726540ef9e6bfc0821650db0e62da3_crysis_dharma | Triage

Sharing

General

Target

2023-12-14_d4726540ef9e6bfc0821650db0e62da3_crysis_dharma
Size

92KB
MD5

d4726540ef9e6bfc0821650db0e62da3
SHA1

8881bc14da432189e8ae2494c54bb9db5690b06b
SHA256

f06eec18f16bebed895404d4d77863a2f157cf12695df1b0710f865dc7a5be4b
SHA512

a52cce09463860f8e2be58c9dfbaab56cc00f9fac95500a0f380b0466ff91fcd838bc835ae2c5faba4028bbe174c215fd976f777c4adfa1b2d3e1460386ea531
SSDEEP

1536:mBwl+KXpsqN5vlwWYyhY9S4AKBYqCWby6/sAemJnmpKoH8VQ27MjCiF:Qw+asqN5aW/hLyBCWW6/fem4pfUQ27M3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2023-12-14_d4726540ef9e6bfc0821650db0e62da3_crysis_dharma

Files

2023-12-14_d4726540ef9e6bfc0821650db0e62da3_crysis_dharma
.exe windows:5 windows x86 arch:x86

f86dec4a80961955a89e7ed62046cc0e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
WaitForSingleObject
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetLastError
EnterCriticalSection
ReleaseMutex
CloseHandle

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE