SharpDPAPI[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SharpDPAPI.exe
Size

126KB
MD5

0baffd5b613d880fafceca3eb877bb4a
SHA1

70831c812558dc6eafdccb5bd1379bb1977ce532
SHA256

68b786e3c35830c502c83f6a11e3e596c5ee30f7534f43217032288c8a505004
SHA512

b1127b677a8e1f8062d20fc550f63fa21d176a1f721e4944d92075de62eb49cdcd42df9090bdcabf89b40e8e7f112201ec46ff7fb77b4393cc22712761f729b3
SSDEEP

1536:RS5pPEPCpfJJHkEo63uRS1gjFq+MZjuOO0OOxerpXSAGMCXobbBhYpmA2ZszpA:CpjH66+Y1mqKlXJG7X6bBmpmA2gA

Score

1^/10

Malware Config

Signatures

Files

SharpDPAPI.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ