cf86c46d6d39dfa00ee312f08103b68f32910bcc8d87a2497cfd8e7f028aed27 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf86c46d6d39dfa00ee312f08103b68f32910bcc8d87a2497cfd8e7f028aed27
Size

4KB
MD5

913748ab1ad237b1eb5ab69a0083c766
SHA1

95332b61100856f7499f76120d18c4129982aaf3
SHA256

cf86c46d6d39dfa00ee312f08103b68f32910bcc8d87a2497cfd8e7f028aed27
SHA512

bafdf475c8b05df779110f2d70f3b8164c84c1aeb9a932361f28421edf992c1ab733186a7200d3e74a2c31e79a0696b5993ab9bec4f5f0671607585981d73164
SSDEEP

48:SWkO0IoyTnXz+ihZjokKYbkd+c2AdGWcpiX7Ur/Li3NxD:ZJTnXzvokK0CJH7UrKNxD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf86c46d6d39dfa00ee312f08103b68f32910bcc8d87a2497cfd8e7f028aed27

Files

cf86c46d6d39dfa00ee312f08103b68f32910bcc8d87a2497cfd8e7f028aed27
.dll windows:5 windows x86 arch:x86

e97a70102cce77bfe0dc571cb46a4352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
ReadFile

user32

MessageBoxA

shell32

ShellExecuteW

msvcrt

_adjust_fdiv
free
_initterm
malloc

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ