d1eb5ccb273733d785fe1de9e5e1d6b5c4ab8428e69f84e0779c3f094f1177c0 | Triage

Sharing

General

Target

d1eb5ccb273733d785fe1de9e5e1d6b5c4ab8428e69f84e0779c3f094f1177c0
Size

4KB
MD5

603835ed7a3c3d7eebcb42ba2c6a5f89
SHA1

46c6c88748b803895c6bb6d5b5f17fc941d9d2e0
SHA256

d1eb5ccb273733d785fe1de9e5e1d6b5c4ab8428e69f84e0779c3f094f1177c0
SHA512

c99a19093b82fcf9bc49b934a3da0236481b9fa7ca8cccaeb5088786acf9ea70ab67629367cae8e4130adf3821186f3648a2bf10a44820b329e92a4aee85b3d6
SSDEEP

48:SWkO0IoyTnXz+ihZjokKhI2CNaYT9DJzeQaTLKu7O+:ZJTnXzvokiI27kJSQ02u5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1eb5ccb273733d785fe1de9e5e1d6b5c4ab8428e69f84e0779c3f094f1177c0

Files

d1eb5ccb273733d785fe1de9e5e1d6b5c4ab8428e69f84e0779c3f094f1177c0
.dll windows:5 windows x86 arch:x86

e97a70102cce77bfe0dc571cb46a4352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
ReadFile

user32

MessageBoxA

shell32

ShellExecuteW

msvcrt

_adjust_fdiv
free
_initterm
malloc

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ