crys
Static task
static1
Behavioral task
behavioral1
Sample
b17c4e31e8b04534c214ad1d83654fbc393601b980f3d540bfb9692320153cc2N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b17c4e31e8b04534c214ad1d83654fbc393601b980f3d540bfb9692320153cc2N.dll
Resource
win10v2004-20241007-en
General
-
Target
b17c4e31e8b04534c214ad1d83654fbc393601b980f3d540bfb9692320153cc2N
-
Size
4KB
-
MD5
285aea12f3d493bc9bfa55e37471cff0
-
SHA1
78f93f5a2235024c8de8dfb122292c85d8fbe83c
-
SHA256
b17c4e31e8b04534c214ad1d83654fbc393601b980f3d540bfb9692320153cc2
-
SHA512
ee29c8b8706c4570996415ae63d7d63361e2c80950a77b9c1dd382a6d1376df5d84a4d624c6e6b2c896f246a4ecadf3ecddb5c9e12ec4db490c6d67a1888392e
-
SSDEEP
24:e1GSYTe3Cee/0I/kPVCRVtc44MnXz+iM2u8kypgyXwVQwA3H4tROjdngnaLh2fQA:SWkO0IoyTnXz+ihZjokhoW2f5gD78
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b17c4e31e8b04534c214ad1d83654fbc393601b980f3d540bfb9692320153cc2N
Files
-
b17c4e31e8b04534c214ad1d83654fbc393601b980f3d540bfb9692320153cc2N.dll windows:5 windows x86 arch:x86
e97a70102cce77bfe0dc571cb46a4352
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateFileW
VirtualAlloc
ReadFile
user32
MessageBoxA
shell32
ShellExecuteW
msvcrt
_adjust_fdiv
free
_initterm
malloc
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 558B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 482B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ