bf522a9d14ef83e619bdcda3549ac96c8b255a214f82d546534b14c9b74e02f5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf522a9d14ef83e619bdcda3549ac96c8b255a214f82d546534b14c9b74e02f5
Size

4KB
MD5

d01671d37c53c3c3f90ae494d6dc30ee
SHA1

6923b778da9421a1d8835c12dedf1e47cb23252b
SHA256

bf522a9d14ef83e619bdcda3549ac96c8b255a214f82d546534b14c9b74e02f5
SHA512

0ac1ddfde095752addf6816d0552da237a9f3800efce640bde0444f8687ea89a2ff895dfb99cca43db8e538b95132c7158db25404c28564ff065ac49a78a8588
SSDEEP

48:SWkO0IoyTnXz+ihZjokW16VLzHDNxx/kyHf2NBitkl:ZJTnXzvokWYVL/N/kufWBitkl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf522a9d14ef83e619bdcda3549ac96c8b255a214f82d546534b14c9b74e02f5

Files

bf522a9d14ef83e619bdcda3549ac96c8b255a214f82d546534b14c9b74e02f5
.dll windows:5 windows x86 arch:x86

e97a70102cce77bfe0dc571cb46a4352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
ReadFile

user32

MessageBoxA

shell32

ShellExecuteW

msvcrt

_adjust_fdiv
free
_initterm
malloc

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ