5a3a075944b03f8cfc103c70e55a0dbcbdbd3696cb171c47abedac864867e3a6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a3a075944b03f8cfc103c70e55a0dbcbdbd3696cb171c47abedac864867e3a6
Size

3KB
MD5

96cf5e4ea53899d53c4a976fc3d5c4d6
SHA1

af932d17ee1c00dd6b0510eb70f0af7e6f97d397
SHA256

5a3a075944b03f8cfc103c70e55a0dbcbdbd3696cb171c47abedac864867e3a6
SHA512

1b1e5f53255dc4d1e65a25944c0240d51eae37584a8c9708921f1ba46241e008a54dfcc208d28394eefa07174f747d5fdce5c7879b93cd74220a2f4936976b9a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a3a075944b03f8cfc103c70e55a0dbcbdbd3696cb171c47abedac864867e3a6

Files

5a3a075944b03f8cfc103c70e55a0dbcbdbd3696cb171c47abedac864867e3a6
.dll windows:5 windows x86 arch:x86

0edb7976d2b004634887852fd95b0b95

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetLastError
VirtualAlloc
ExitProcess

shell32

ShellExecuteW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 539B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 449B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ