5b9deeaaa095c474ef3225d022bffc60N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b9deeaaa095c474ef3225d022bffc60N
Size

5KB
MD5

5b9deeaaa095c474ef3225d022bffc60
SHA1

484d8aa369ffa913a67f250ddcaf85710fc8e0bc
SHA256

20bcc36c2eea4bbde4016c1db852d3f5327b025c2299780bcde5e44d1282ab27
SHA512

08178eadb70f56a740eac8024c7998fe9b5d9ddfc6e061cc84be74c0ccb803655bdcad2472de011e61e4efe150ab65aa8ac6642045ec4719662f18cb9928558e
SSDEEP

48:SWkO0IoyTnXz+ihZjokwLHyTsUcxtLNAa3U24uPQ0ruHxTCgWZ5i+F5vkjTk:ZJTnXzvokwbtp3xruHu8+FmjA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b9deeaaa095c474ef3225d022bffc60N

Files

5b9deeaaa095c474ef3225d022bffc60N
.dll windows:5 windows x86 arch:x86

e97a70102cce77bfe0dc571cb46a4352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
ReadFile

user32

MessageBoxA

shell32

ShellExecuteW

msvcrt

_adjust_fdiv
free
_initterm
malloc

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ