crys
Static task
static1
Behavioral task
behavioral1
Sample
7881b15d7b09a8e88210599f9e00529e.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7881b15d7b09a8e88210599f9e00529e.dll
Resource
win10v2004-20231215-en
General
-
Target
7881b15d7b09a8e88210599f9e00529e
-
Size
3KB
-
MD5
7881b15d7b09a8e88210599f9e00529e
-
SHA1
db3b3cc91fb29a1acd9ed672150abfc0d459f786
-
SHA256
433b05a115268dbb3fe746ef9a0e96be79197d1df21cea61b3760dfe8c5f4f4c
-
SHA512
126d8b77ca2f42793006ce04724662f1e4880b33d0411b68f1e42d9fe058c1e4ff385459d20513c6ea7448012b5356cebe9d7d495bd743f6bcaf06597358b065
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7881b15d7b09a8e88210599f9e00529e
Files
-
7881b15d7b09a8e88210599f9e00529e.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 521B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 417B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ