1703622483bbec6a97a8a4cda1540f430552958cc18926212b46195dd2750922 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1703622483bbec6a97a8a4cda1540f430552958cc18926212b46195dd2750922
Size

4KB
MD5

0b5704fcb0905c3fe27513304f3b140a
SHA1

91af8bc2603d1921df49a048bfa788bc72710d43
SHA256

1703622483bbec6a97a8a4cda1540f430552958cc18926212b46195dd2750922
SHA512

4ff58f5ba59cb613134c11122361860cca27342c480fc04091b4ae82b79dbe3224ad5e493484a0333145589a677ec998a671491976e0748bdffbb42a35bbfaef

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1703622483bbec6a97a8a4cda1540f430552958cc18926212b46195dd2750922

Files

1703622483bbec6a97a8a4cda1540f430552958cc18926212b46195dd2750922
.dll windows:5 windows x86 arch:x86

eee5ab48f9e07352e908d25d6d1264ef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameW
CreateFileW
VirtualAlloc
ReadFile
Sleep
ExitProcess

advapi32

RegOpenKeyA

shell32

ShellExecuteW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 587B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 559B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 146B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ