e388fbf7804e8174d9a774b20cc452f9e5338fc34974823faedd072a809e9123 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e388fbf7804e8174d9a774b20cc452f9e5338fc34974823faedd072a809e9123
Size

4KB
MD5

cf8a2871d31d456b0b3dc45603b03ea5
SHA1

7bd7807becb03f8e657ace83fdbb0448f76cc429
SHA256

e388fbf7804e8174d9a774b20cc452f9e5338fc34974823faedd072a809e9123
SHA512

130558b28a6fe636f127024593023dcab395c1df9d0b0ea0d7d7113a75d166674fe39e0240cabd3dd586935b94f41f01c35ea1fe36b5a13e9018ca4829a513b0
SSDEEP

48:SWkO0IoyTnXz+ihZjokWfvAsC2Q4Xe8I/F6wwCvnMzZ4nPwMB7:ZJTnXzvokHv2Q4XeZUwwCvgZ2Pv7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e388fbf7804e8174d9a774b20cc452f9e5338fc34974823faedd072a809e9123

Files

e388fbf7804e8174d9a774b20cc452f9e5338fc34974823faedd072a809e9123
.dll windows:5 windows x86 arch:x86

e97a70102cce77bfe0dc571cb46a4352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
ReadFile

user32

MessageBoxA

shell32

ShellExecuteW

msvcrt

_adjust_fdiv
free
_initterm
malloc

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ