CryptVB[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CryptVB.dll
Size

12KB
MD5

e2e55ff644d8c089364500036575c875
SHA1

7ed7ebdb32eaf210ea30bb9369863b7e03a04ee0
SHA256

2806b069e2811b395257c21478e0892d42b4a0c7309340348d224b5d58fbe390
SHA512

d6c41ac8871a917620c08ee49c4574810a31315bf26bb50a4d93618831c6cb3bca88f9adb2acbf67db64f6d7bf5f1db42851bab2c70e20c83fdad771589ff15a
SSDEEP

192:2A77FZ7y810g+xfvFGK/xhzfDpYbZVMnlYJL/eWBQtIDLRxEypCU:2A7JZF29xftPzrpgbqWq+LRFpCU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CryptVB.dll

Files

CryptVB.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\PDA\SHPDA\CryptVB\obj\Debug\CryptVB.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 95B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ