18bc62ea34ac19a127edec3e1d9acbc37f41d5de850650640366025aa760fa21 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18bc62ea34ac19a127edec3e1d9acbc37f41d5de850650640366025aa760fa21
Size

3KB
MD5

42177d829aca3a3f308927888b416278
SHA1

d3115843e2a8bf4e698b586b3fb5344642ebf0c5
SHA256

18bc62ea34ac19a127edec3e1d9acbc37f41d5de850650640366025aa760fa21
SHA512

0c56abf1057c20d3c8739f652fabda72442dc0c441492905c81d2407006e250e8e01bfc8b1c0a23b78941253b30215a41da6c0ed9564e918fe1f73241264b346

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18bc62ea34ac19a127edec3e1d9acbc37f41d5de850650640366025aa760fa21

Files

18bc62ea34ac19a127edec3e1d9acbc37f41d5de850650640366025aa760fa21
.dll windows:5 windows x86 arch:x86

e97a70102cce77bfe0dc571cb46a4352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
ReadFile

user32

MessageBoxA

shell32

ShellExecuteW

msvcrt

_adjust_fdiv
free
_initterm
malloc

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ