56707def9c6bd2d479bbad64976f057ee60a132ce0f1abf5d08de8b69d14762b | Triage

Sharing

General

Target

56707def9c6bd2d479bbad64976f057ee60a132ce0f1abf5d08de8b69d14762b
Size

4KB
MD5

93849744e7e769ed9ed888f3da9c6b97
SHA1

519a26c6fb2cfa0f84277a0f8d0abf7ad8d421c7
SHA256

56707def9c6bd2d479bbad64976f057ee60a132ce0f1abf5d08de8b69d14762b
SHA512

52fe0ce56b58f8585739682ac9614597414fa4ffd62872c14031a111c5f93378af08955175ade3c1ca4a4ec873e521701d5a91dce8c655f9d29ad77012aa10a4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56707def9c6bd2d479bbad64976f057ee60a132ce0f1abf5d08de8b69d14762b

Files

56707def9c6bd2d479bbad64976f057ee60a132ce0f1abf5d08de8b69d14762b
.dll windows:5 windows x86 arch:x86

eee5ab48f9e07352e908d25d6d1264ef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameW
CreateFileW
VirtualAlloc
ReadFile
Sleep
ExitProcess

advapi32

RegOpenKeyA

shell32

ShellExecuteW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 587B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 559B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 146B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ