50552b18408d9d4dd30ea127a60a868486808ef29233f75a5940893ddb88d3ddN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

50552b18408d9d4dd30ea127a60a868486808ef29233f75a5940893ddb88d3ddN
Size

3KB
MD5

792c746ac725ccc59c836bbc24636cd0
SHA1

e678fb8aa2a059139e8d2916c9ab6d52f69309d9
SHA256

50552b18408d9d4dd30ea127a60a868486808ef29233f75a5940893ddb88d3dd
SHA512

08affb05ce644df357305c770fba2743379b8f102d31e9d765ed8ec33454a8fcb4e88cb4ab77ef53b9093b9f3e00ebe811c7d17e1dc305a61c8fb28e598f12f2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50552b18408d9d4dd30ea127a60a868486808ef29233f75a5940893ddb88d3ddN

Files

50552b18408d9d4dd30ea127a60a868486808ef29233f75a5940893ddb88d3ddN
.dll windows:5 windows x86 arch:x86

e97a70102cce77bfe0dc571cb46a4352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
ReadFile

user32

MessageBoxA

shell32

ShellExecuteW

msvcrt

_adjust_fdiv
free
_initterm
malloc

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ