c6498d8b1cc64b9dd77d54e016591080N | Triage

Sharing

General

Target

c6498d8b1cc64b9dd77d54e016591080N
Size

3KB
MD5

c6498d8b1cc64b9dd77d54e016591080
SHA1

28b7080f2ce110a843e581fa782db1ef2fbed5dc
SHA256

e45da46bc359a2f5a88406769e544a39af28d4fdcba0b2a42e9d56096629a54d
SHA512

4ddda2872c8ae59373ef4469550f598e545e0fbf78a6f3bc34ada240c2b169293ad80f5407297bf991c886f7ddf4df46d90f19a48dbe2155a3c592aa74e0e14c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c6498d8b1cc64b9dd77d54e016591080N

Files

c6498d8b1cc64b9dd77d54e016591080N
.dll windows:5 windows x86 arch:x86

e97a70102cce77bfe0dc571cb46a4352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
ReadFile

user32

MessageBoxA

shell32

ShellExecuteW

msvcrt

_adjust_fdiv
free
_initterm
malloc

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ