6268252043c0111afb0ab0b2813f4851c6eda84a6558d7f45375c8bdf76d3aff | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6268252043c0111afb0ab0b2813f4851c6eda84a6558d7f45375c8bdf76d3aff
Size

3KB
MD5

371e90930c3bc53e512a8fd5c103129e
SHA1

e503bd5c8fa3932dfd50ae9a136c9750716bd149
SHA256

6268252043c0111afb0ab0b2813f4851c6eda84a6558d7f45375c8bdf76d3aff
SHA512

a6b9a3769f043936e14e81f5e714c16b7c19f7c920d1de46682bcfb0f8edd649debc0b5756ef0fdd227993f773008b56de09f191c646db754fd03a4955963e13

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6268252043c0111afb0ab0b2813f4851c6eda84a6558d7f45375c8bdf76d3aff

Files

6268252043c0111afb0ab0b2813f4851c6eda84a6558d7f45375c8bdf76d3aff
.dll windows:5 windows x86 arch:x86

e97a70102cce77bfe0dc571cb46a4352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
ReadFile

user32

MessageBoxA

shell32

ShellExecuteW

msvcrt

_adjust_fdiv
free
_initterm
malloc

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ