d0ab339eeb5082126f20818bb3c85ed505d097b50777db39d3af3014dad92cf7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0ab339eeb5082126f20818bb3c85ed505d097b50777db39d3af3014dad92cf7
Size

3KB
MD5

55f5c86ca2395fb73b5892a2f4cbb776
SHA1

6335314f7474dadb5289a3bbb361ec9c056b1961
SHA256

d0ab339eeb5082126f20818bb3c85ed505d097b50777db39d3af3014dad92cf7
SHA512

4f8e784e3eec9a4a8f2a9b32567635d1048194fb74d4345c2e23a61276896fb0f9f3344cfb9b39a9bdfbda268e6731cfff5c6783838dd3ccc203367c98a690a9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0ab339eeb5082126f20818bb3c85ed505d097b50777db39d3af3014dad92cf7

Files

d0ab339eeb5082126f20818bb3c85ed505d097b50777db39d3af3014dad92cf7
.dll windows:5 windows x86 arch:x86

0edb7976d2b004634887852fd95b0b95

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetLastError
VirtualAlloc
ExitProcess

shell32

ShellExecuteW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 539B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 449B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ