d639a154ed092ba233fe1da717d3646971dbbf2dd7756f53c243dc46ebbd8e2e | Triage

Sharing

General

Target

d639a154ed092ba233fe1da717d3646971dbbf2dd7756f53c243dc46ebbd8e2e
Size

4KB
MD5

ab990c7958c1dd688189868ab6079e55
SHA1

8fa21f21d52d0bb75161a9ede92f3bba9d57b93f
SHA256

d639a154ed092ba233fe1da717d3646971dbbf2dd7756f53c243dc46ebbd8e2e
SHA512

80315e50a6da5dfc1eb3abca70684ab6ed0e5ffde869ab6c258fd87f535861fc8a94f4d6bf6921118f2dfbbd7fd3bf03f07d3d2282335cd469b38fe0ce902945
SSDEEP

24:e1GSYTe3Cee/0I/kPVCRVtc44MnXz+iM2u8kypgyXwVQwA3H4tROj5dXPcLFwPa8:SWkO0IoyTnXz+ihZjokj62yv2hEdq/p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d639a154ed092ba233fe1da717d3646971dbbf2dd7756f53c243dc46ebbd8e2e

Files

d639a154ed092ba233fe1da717d3646971dbbf2dd7756f53c243dc46ebbd8e2e
.dll windows:5 windows x86 arch:x86

e97a70102cce77bfe0dc571cb46a4352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
ReadFile

user32

MessageBoxA

shell32

ShellExecuteW

msvcrt

_adjust_fdiv
free
_initterm
malloc

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ