crys
Static task
static1
Behavioral task
behavioral1
Sample
7a31b3a42f18c5ae28c3b5d60968f6eab10cd011dd2e9ed7b6868e2f3507a10cN.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
7a31b3a42f18c5ae28c3b5d60968f6eab10cd011dd2e9ed7b6868e2f3507a10cN.dll
Resource
win10v2004-20240802-en
General
-
Target
7a31b3a42f18c5ae28c3b5d60968f6eab10cd011dd2e9ed7b6868e2f3507a10cN
-
Size
4KB
-
MD5
35fbfbb5233f4e2f3d61e9bb72abd150
-
SHA1
5dd0af2a547528f2d63d087987e73513d0cffdaa
-
SHA256
7a31b3a42f18c5ae28c3b5d60968f6eab10cd011dd2e9ed7b6868e2f3507a10c
-
SHA512
776478accec57ef71c9bcb9f188e15a009a3cc0815cce7d5271b6cdd50c5136d8a3afe29d40d26ce56920cf0d3150f82d30dc0434387d813e1d22c2fd671e2f2
-
SSDEEP
48:SKLA9oyTnXz+ihZjulclZyjC12BUE19CPMI:eTnXzvulclZyj71pI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7a31b3a42f18c5ae28c3b5d60968f6eab10cd011dd2e9ed7b6868e2f3507a10cN
Files
-
7a31b3a42f18c5ae28c3b5d60968f6eab10cd011dd2e9ed7b6868e2f3507a10cN.dll windows:5 windows x86 arch:x86
e97a70102cce77bfe0dc571cb46a4352
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateFileW
VirtualAlloc
ReadFile
user32
MessageBoxA
shell32
ShellExecuteW
msvcrt
_adjust_fdiv
free
_initterm
malloc
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 558B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 486B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ