212486e0f8dff1c0df1b35f67104767fbf79ce2194c07bcf34ab990df13b2fba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

212486e0f8dff1c0df1b35f67104767fbf79ce2194c07bcf34ab990df13b2fba
Size

3KB
MD5

2f4b1e9a976aa6840bf6eefde320b95a
SHA1

5f2839145d0435c1608ef65500cea0077a73aa54
SHA256

212486e0f8dff1c0df1b35f67104767fbf79ce2194c07bcf34ab990df13b2fba
SHA512

1159017be9ac882b55381646e09e5704c3edbd9ff5fa3d372453cdb40bf68cc1040666525677bf31d759eff344681bd44e72150e1ceefedb4780480154b3c851

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
212486e0f8dff1c0df1b35f67104767fbf79ce2194c07bcf34ab990df13b2fba

Files

212486e0f8dff1c0df1b35f67104767fbf79ce2194c07bcf34ab990df13b2fba
.dll windows:5 windows x86 arch:x86

e97a70102cce77bfe0dc571cb46a4352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
ReadFile

user32

MessageBoxA

shell32

ShellExecuteW

msvcrt

_adjust_fdiv
free
_initterm
malloc

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 559B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ