Protein_x64[.]4[.]1[.]dll | Triage

Sharing

General

Target

Protein_x64.4.1.dll
Size

3KB
MD5

4f1ba0bef9467b2525ec453792461b31
SHA1

799fded6489ad4df7d3459cc3bb7ef167c04da6c
SHA256

d328c59733c4953ca4a923ccf04b37a4de8839e54d9e8901730797311c7ab6b8
SHA512

cf9677fbeba412a8a43eda4f67dc2711b89e8262564e425b949ce8e52be75bbbfc75ced1492d7b84113f7cf373f4d3cb1b5ad5e43d11c4fe40749a803448db9c

Score

1^/10

Malware Config

Signatures

Files

Protein_x64.4.1.dll
.dll windows x64

7b3faf2fc1aa544a49b368ac163ea8c3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

advapi32

RegCloseKey

Exports

Exports

ProteinDLL_Hibernate

Sections

.MPRESS1
Size: 1024B - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE