ba7cf73637342e3c8f9e0c620902d5b4f094e672eeca675e0a95a82e3c63c6bf | Triage

Sharing

General

Target

ba7cf73637342e3c8f9e0c620902d5b4f094e672eeca675e0a95a82e3c63c6bf
Size

3KB
MD5

f7a5b7ab402448b36c2e84f7f6a9a545
SHA1

25484afbb77121fec7963afaa20e6108656c3c2e
SHA256

ba7cf73637342e3c8f9e0c620902d5b4f094e672eeca675e0a95a82e3c63c6bf
SHA512

ec2860280884781ef513f7a35749a62e9ee18e62724c1664d26eea1dcd8f03805aa6cb9032c0e74b3f4db94251b79a0c0e7430cfd594d4db20f7105fd9c04129

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba7cf73637342e3c8f9e0c620902d5b4f094e672eeca675e0a95a82e3c63c6bf

Files

ba7cf73637342e3c8f9e0c620902d5b4f094e672eeca675e0a95a82e3c63c6bf
.dll windows:5 windows x86 arch:x86

0edb7976d2b004634887852fd95b0b95

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetLastError
VirtualAlloc
ExitProcess

shell32

ShellExecuteW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 539B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 449B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ