4271f466237a15a28eaf7a8ba5a2a432d6afcb587d022bfb211f2752e82be4c4N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4271f466237a15a28eaf7a8ba5a2a432d6afcb587d022bfb211f2752e82be4c4N
Size

3KB
MD5

1fa3310623e56bb39c208c2bbc1f1c10
SHA1

441e882541bf4ffd5fdb45c6c36499f04edd991c
SHA256

4271f466237a15a28eaf7a8ba5a2a432d6afcb587d022bfb211f2752e82be4c4
SHA512

85740e5d8aa82dd2169896991376d0114b2b4a5ece9a84e998ec40114c3a30d3703d21f36826f79a82a510e71096c9d12b2a7db0207f290537a70637740d8734

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4271f466237a15a28eaf7a8ba5a2a432d6afcb587d022bfb211f2752e82be4c4N

Files

4271f466237a15a28eaf7a8ba5a2a432d6afcb587d022bfb211f2752e82be4c4N
.dll windows:5 windows x86 arch:x86

0edb7976d2b004634887852fd95b0b95

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetLastError
VirtualAlloc
ExitProcess

shell32

ShellExecuteW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 539B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 449B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ