cf4225a0ab8c2371990bf3fc0cbe36ba97eec123985f2e0d7d2ca1b18ab90898 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf4225a0ab8c2371990bf3fc0cbe36ba97eec123985f2e0d7d2ca1b18ab90898
Size

4KB
MD5

41fd080b7a469aaeff18421eb2964d1b
SHA1

95546c296be539d00e770c7899468ff028eb5b48
SHA256

cf4225a0ab8c2371990bf3fc0cbe36ba97eec123985f2e0d7d2ca1b18ab90898
SHA512

e367f02a5a5902c903478b79e04ca1e89d5dcf363084a1cd876e4bd6c8298b5fe0f98907d502ea3892fbc224bf05ba5f67506dcaf12df3b2fad3be0280ae9499
SSDEEP

48:SWkO0IoyTnXz+ihZjokHECbE1HNkQ4S4+lVd:ZJTnXzvok3bEb9494Vd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf4225a0ab8c2371990bf3fc0cbe36ba97eec123985f2e0d7d2ca1b18ab90898

Files

cf4225a0ab8c2371990bf3fc0cbe36ba97eec123985f2e0d7d2ca1b18ab90898
.dll windows:5 windows x86 arch:x86

e97a70102cce77bfe0dc571cb46a4352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
ReadFile

user32

MessageBoxA

shell32

ShellExecuteW

msvcrt

_adjust_fdiv
free
_initterm
malloc

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ