crys
Static task
static1
Behavioral task
behavioral1
Sample
b7cb57f942cc76161d354235e695f140N.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b7cb57f942cc76161d354235e695f140N.dll
Resource
win10v2004-20240709-en
General
-
Target
b7cb57f942cc76161d354235e695f140N.exe
-
Size
5KB
-
MD5
b7cb57f942cc76161d354235e695f140
-
SHA1
6d0ba4f6b870b2550496221365e482b3b49cd810
-
SHA256
ca9ff3f3b2a55c645bd5f170b4ddf5d9410fe2725039d5dafb3180476c988400
-
SHA512
f66499d7990e7b55d41cb4d39bedcdc57ff509b5f052ddaaa45fb13d88d147eaaee7e585e3715e500e1f9f2842e7f1551e8a91bd6eddfe7e323c5be1a62ea680
-
SSDEEP
48:SWkO0IoyTnXz+ihZjokwP+J8WMAurpA09sIwbLR38v+ZfzJ+7Ggh4:ZJTnXzvokwP++WMXrpkIwx4Qc7GgS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7cb57f942cc76161d354235e695f140N.exe
Files
-
b7cb57f942cc76161d354235e695f140N.exe.dll windows:5 windows x86 arch:x86
e97a70102cce77bfe0dc571cb46a4352
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateFileW
VirtualAlloc
ReadFile
user32
MessageBoxA
shell32
ShellExecuteW
msvcrt
_adjust_fdiv
free
_initterm
malloc
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 558B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 482B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ