8c14fb7ff136c2764cae2065436fd3838fb93ee3d9a29bc18a10c1bb09dbe72b | Triage

Sharing

General

Target

8c14fb7ff136c2764cae2065436fd3838fb93ee3d9a29bc18a10c1bb09dbe72b
Size

4KB
MD5

eb4d7c6652f72251878f36fea9aed5e4
SHA1

3e8355b08864399ab47263e7c673f95f60df68d3
SHA256

8c14fb7ff136c2764cae2065436fd3838fb93ee3d9a29bc18a10c1bb09dbe72b
SHA512

486dd4cd442cb839a0bfc22b79c2789a269d83bb20cb6a4647a41ec9fef7e7ab53ce57f99ef5590cb037ce80ed666c50aa3c6a70772d53aa2ae0fc6bd0f138f9
SSDEEP

48:SKLA9oyTnXz+ihZjuLevjB+4IT2Tsv7dN7JJdjYJxlEL:eTnXzvuLerQz1hfJdjYPy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c14fb7ff136c2764cae2065436fd3838fb93ee3d9a29bc18a10c1bb09dbe72b

Files

8c14fb7ff136c2764cae2065436fd3838fb93ee3d9a29bc18a10c1bb09dbe72b
.dll windows:5 windows x86 arch:x86

e97a70102cce77bfe0dc571cb46a4352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
ReadFile

user32

MessageBoxA

shell32

ShellExecuteW

msvcrt

_adjust_fdiv
free
_initterm
malloc

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 486B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ