2024-06-28_0f06a8f8b8f0785d127faa6c1be8790d_crysis_dharma | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-28_0f06a8f8b8f0785d127faa6c1be8790d_crysis_dharma
Size

92KB
MD5

0f06a8f8b8f0785d127faa6c1be8790d
SHA1

37e6bfcf5c7b0e0acfe579a4201bb23c38afab7b
SHA256

8f430d9a9b469f217f4ba6136b7e3737d058b7ea631c78278658d4458884c51f
SHA512

7a5339006e59e8564f4b6972de6df3ca96543e8a00c5ce7acd0cbde3aa58b3924aaa83be39b8b1ec323cc2d7197d97b2a369f059c6bdc251521768fd438058f8
SSDEEP

1536:mBwl+KXpsqN5vlwWYyhV9S4Aa5swz/HbEw5KtMc0NvDu:Qw+asqN5aW/hG3mYzM5w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-28_0f06a8f8b8f0785d127faa6c1be8790d_crysis_dharma

Files

2024-06-28_0f06a8f8b8f0785d127faa6c1be8790d_crysis_dharma
.exe windows:5 windows x86 arch:x86

f86dec4a80961955a89e7ed62046cc0e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\crysis\Release\PDB\payload.pdb

Imports

kernel32

GetProcAddress
LoadLibraryA
WaitForSingleObject
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetLastError
EnterCriticalSection
ReleaseMutex
CloseHandle

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE