a55099ffc315f899725df8f97d61fc0981fbebe3db3d31dac21710868a4ac969 | Triage

Sharing

General

Target

a55099ffc315f899725df8f97d61fc0981fbebe3db3d31dac21710868a4ac969
Size

3KB
MD5

61d4984b339c91028bc8b0b29adde837
SHA1

d26ff5b846abde43e5c40671b5097361797ba7cc
SHA256

a55099ffc315f899725df8f97d61fc0981fbebe3db3d31dac21710868a4ac969
SHA512

dda18c847cb952058b486a84a167a53c31f3bc89aba87e8aace1ce2a30b29193be9f121f06cc7bb1925304f5757a2171351af1c33995a3b4861b1e3b1825ca62

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a55099ffc315f899725df8f97d61fc0981fbebe3db3d31dac21710868a4ac969

Files

a55099ffc315f899725df8f97d61fc0981fbebe3db3d31dac21710868a4ac969
.dll windows:5 windows x86 arch:x86

0edb7976d2b004634887852fd95b0b95

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetLastError
VirtualAlloc
ExitProcess

shell32

ShellExecuteW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 539B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 449B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ