crys
Static task
static1
Behavioral task
behavioral1
Sample
aa94ea9b0532da1d25d3e651777c89972990afe487bb1f6c7905bd80e35a4378.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
aa94ea9b0532da1d25d3e651777c89972990afe487bb1f6c7905bd80e35a4378.dll
Resource
win10v2004-20240226-en
General
-
Target
aa94ea9b0532da1d25d3e651777c89972990afe487bb1f6c7905bd80e35a4378
-
Size
4KB
-
MD5
6b87ea4a2e1760a8b43777bf2fb82f13
-
SHA1
484b12c51c98b008f76c5e0bf6f35c461e847280
-
SHA256
aa94ea9b0532da1d25d3e651777c89972990afe487bb1f6c7905bd80e35a4378
-
SHA512
427bd3dbe178dbb3f8d1f3d9f69e454a1520f655a9feccb561c54590ca4e84a6bd01e8bca1b731d9f19c11aed4279939bb8f249d75e6f519ae657488ba0160b5
-
SSDEEP
48:SWkO0IoyTnXz+ihZjokw+qPM2Vj9nACyTxkfiPD0akm4:ZJTnXzvokw+qPV5cxkfi70ac
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa94ea9b0532da1d25d3e651777c89972990afe487bb1f6c7905bd80e35a4378
Files
-
aa94ea9b0532da1d25d3e651777c89972990afe487bb1f6c7905bd80e35a4378.dll windows:5 windows x86 arch:x86
e97a70102cce77bfe0dc571cb46a4352
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateFileW
VirtualAlloc
ReadFile
user32
MessageBoxA
shell32
ShellExecuteW
msvcrt
_adjust_fdiv
free
_initterm
malloc
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 558B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 482B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ