984f29b2cf4b6bb9329ac61e37bf2fb49b41e7531466bb34596f04952ff1c4fe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

984f29b2cf4b6bb9329ac61e37bf2fb49b41e7531466bb34596f04952ff1c4fe
Size

3KB
MD5

8b0b5799b1243347903b122d950703d2
SHA1

71c20571d75aa494af18ca7ebaa086b4a5f6d613
SHA256

984f29b2cf4b6bb9329ac61e37bf2fb49b41e7531466bb34596f04952ff1c4fe
SHA512

06026cb120684ec375c740cedd25f47fdfabe2b1581d09daf237c49e3b80dfb2c28b3d9e4edbd7f74903bbaaa5f1cc6cdebc5f402731e814fece0177e17877a9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
984f29b2cf4b6bb9329ac61e37bf2fb49b41e7531466bb34596f04952ff1c4fe

Files

984f29b2cf4b6bb9329ac61e37bf2fb49b41e7531466bb34596f04952ff1c4fe
.dll windows:5 windows x86 arch:x86

e97a70102cce77bfe0dc571cb46a4352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
ReadFile

user32

MessageBoxA

shell32

ShellExecuteW

msvcrt

_adjust_fdiv
free
_initterm
malloc

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ