de717efadf0d2f4d837c595094eb3fb465f040087629915e8eef51ce9ecd0f60 | Triage

Sharing

General

Target

de717efadf0d2f4d837c595094eb3fb465f040087629915e8eef51ce9ecd0f60
Size

4KB
MD5

2ea8a32bac9cc3c2182ecdd7745e341e
SHA1

5ab67c580ba03bfdba7dbd7d8098b0a1d1da18d4
SHA256

de717efadf0d2f4d837c595094eb3fb465f040087629915e8eef51ce9ecd0f60
SHA512

3781a33f0069290566f849092cea5ef2cefceea375264355fdea6ee348fd13fb607db241867a8fc17ac894ab6c928032fd76e8cb9cf56edbf5dc01f538e4bb46

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de717efadf0d2f4d837c595094eb3fb465f040087629915e8eef51ce9ecd0f60

Files

de717efadf0d2f4d837c595094eb3fb465f040087629915e8eef51ce9ecd0f60
.dll windows:5 windows x86 arch:x86

eee5ab48f9e07352e908d25d6d1264ef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameW
CreateFileW
VirtualAlloc
ReadFile
Sleep
ExitProcess

advapi32

RegOpenKeyA

shell32

ShellExecuteW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 587B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 559B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 146B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ