dfab5d57b018b9b215ba6c87d7b6626d50e0a246de68d3eb39f917c2630f15f5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfab5d57b018b9b215ba6c87d7b6626d50e0a246de68d3eb39f917c2630f15f5
Size

3KB
MD5

a41ab06dd3634de1c052358cfeb16b35
SHA1

b0e82b91feec3f204d35156cb05dfa90182405eb
SHA256

dfab5d57b018b9b215ba6c87d7b6626d50e0a246de68d3eb39f917c2630f15f5
SHA512

345395d756508634b6aa8035e000440ac21a12a8697cff84830d24e07107760f5ddf6a09e2327bf3c04ffe8b56057b76171d4e933c3832bf442f9f9eb4455166

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfab5d57b018b9b215ba6c87d7b6626d50e0a246de68d3eb39f917c2630f15f5

Files

dfab5d57b018b9b215ba6c87d7b6626d50e0a246de68d3eb39f917c2630f15f5
.dll windows:5 windows x86 arch:x86

0edb7976d2b004634887852fd95b0b95

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetLastError
VirtualAlloc
ExitProcess

shell32

ShellExecuteW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 539B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 449B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ