48ba71ccf9e4f086bd6e7478f8f3a4ba6626f3950b0e96299bcd286dae4222d4N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48ba71ccf9e4f086bd6e7478f8f3a4ba6626f3950b0e96299bcd286dae4222d4N
Size

3KB
MD5

1c84fa0366fd71b7a57f9589fc379d80
SHA1

6bc2dbc5dcb74153302fc43a30ac9bc94247dda2
SHA256

48ba71ccf9e4f086bd6e7478f8f3a4ba6626f3950b0e96299bcd286dae4222d4
SHA512

9a278b2425e1316a3d4c22e66a9e0460fba85ac0b5075a731eb1d1aed616a31e961cae48006589c91ae8c562bb716f89bbbf6b24c15f28e48c236a5a1207734e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48ba71ccf9e4f086bd6e7478f8f3a4ba6626f3950b0e96299bcd286dae4222d4N

Files

48ba71ccf9e4f086bd6e7478f8f3a4ba6626f3950b0e96299bcd286dae4222d4N
.dll windows:5 windows x86 arch:x86

e97a70102cce77bfe0dc571cb46a4352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
ReadFile

user32

MessageBoxA

shell32

ShellExecuteW

msvcrt

_adjust_fdiv
free
_initterm
malloc

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 559B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ