f28c42558e73166466c2c6dfe9b92258ea9f35e189cc23ef326c49b54041b4f5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f28c42558e73166466c2c6dfe9b92258ea9f35e189cc23ef326c49b54041b4f5
Size

3KB
MD5

1fd4a906a6268a4565b82bab66e0f57f
SHA1

ddd116b3e92b00a3cc1da4c2895f2cff49a14254
SHA256

f28c42558e73166466c2c6dfe9b92258ea9f35e189cc23ef326c49b54041b4f5
SHA512

9ff962fa8426afad64fd3cd97bc3ce5d750ea20d260bce4d1d8a7855ee92cfff26b21e706e5ffaa3a3a307131d3628f441b6bffd8050411eec7a8b7959680e3f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f28c42558e73166466c2c6dfe9b92258ea9f35e189cc23ef326c49b54041b4f5

Files

f28c42558e73166466c2c6dfe9b92258ea9f35e189cc23ef326c49b54041b4f5
.dll windows:5 windows x86 arch:x86

e97a70102cce77bfe0dc571cb46a4352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
ReadFile

user32

MessageBoxA

shell32

ShellExecuteW

msvcrt

_adjust_fdiv
free
_initterm
malloc

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ