0417116f8f89ebe2e9777f6cc0340d1fc98b5a8f12a17d5db290e2d12647741b | Triage

Sharing

General

Target

0417116f8f89ebe2e9777f6cc0340d1fc98b5a8f12a17d5db290e2d12647741b
Size

5KB
MD5

d3cad67c3263eada5ea467c556d84b35
SHA1

0e635c4cbcc5f88ccaaeb211ae83dc63c4ab2abc
SHA256

0417116f8f89ebe2e9777f6cc0340d1fc98b5a8f12a17d5db290e2d12647741b
SHA512

d12ae546f4ba16cb9678336d0fd5f90a59aa50035f62f52c6ba5f79b7f04ef76a990566ea44fbe9774192fa4213a750d7d8666457267ccca1ece5f9058738355
SSDEEP

96:ZJTnXzvok/ZHil+6IMQORivQObm2XkFoQRG:ZJrXzwkhClFHfioOa2X+bg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0417116f8f89ebe2e9777f6cc0340d1fc98b5a8f12a17d5db290e2d12647741b

Files

0417116f8f89ebe2e9777f6cc0340d1fc98b5a8f12a17d5db290e2d12647741b
.dll windows:5 windows x86 arch:x86

e97a70102cce77bfe0dc571cb46a4352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
ReadFile

user32

MessageBoxA

shell32

ShellExecuteW

msvcrt

_adjust_fdiv
free
_initterm
malloc

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ