easy_Benign_fea0d54fdae1c7f3af3535f5ae9bfb58f36135bc3ae447964e5a599c774a8bc5[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

easy_Benign_fea0d54fdae1c7f3af3535f5ae9bfb58f36135bc3ae447964e5a599c774a8bc5.dll
Size

17KB
MD5

2f12e335a438bbf8666d47ecee29bb18
SHA1

db393abddfed328b8e41728cdf45ef3945bdae8b
SHA256

d63c385d3655a7a01ecfe9027610f451cd5004972597b9956405f283f5ba906d
SHA512

b8abc3d035e7bf15941c4c6356b4096872e334f1563e1d32acea37a1fd01d6c77da24bb026104e303028afc5ee837a92c322c7256ccaaee579eca5b1dc6619f5
SSDEEP

192:t2a6uAAjmmkXfDmo1zMunVt6ulVdzFXfQ7IWahno0fUv4PBb:5jmmkXfDfvHlVd27Ifo0CU1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
easy_Benign_fea0d54fdae1c7f3af3535f5ae9bfb58f36135bc3ae447964e5a599c774a8bc5.dll

Files

easy_Benign_fea0d54fdae1c7f3af3535f5ae9bfb58f36135bc3ae447964e5a599c774a8bc5.dll
.dll windows x64

87e7eb07db016fb871d798abc8d4bf4e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

highpoly

??0ChannelType@@QEAA@XZ
??0A3d_Channel@@QEAA@XZ
??1A3d_Channel@@UEAA@XZ
?SetChannelName@A3d_Channel@@QEAAXPEBD@Z
??RShowDebugMessage@@QEAAXPEBD@Z
?AddMetaData@A3d_Channel@@UEAAXAEAVA3dFileSaver@@@Z
?CallChannel@A3d_Channel@@UEAAXXZ
?CheckIndexNrRemoval@A3d_Channel@@UEAAXH@Z
?CheckPublicChannelInstanceRemoval@A3d_Channel@@UEAAXPEAV1@H@Z
?DoDependencyInit@A3d_Channel@@UEAAXPEAVA3d_List@@@Z
?DoEvent@A3d_Channel@@UEAAXH_K@Z
?GetChannelFromChannel@A3d_Channel@@UEAAPEAV1@PEAV1@PEAUChildInfo@@@Z
?GetChannelName@A3d_Channel@@UEAAPEBDXZ
?GetChannelType@A3d_Channel@@UEAA?AVChannelType@@XZ
?GetContextRenderCountName@A3d_Channel@@UEAAPEAVContextRenderCount@@XZ
?GetFeedbackClass@A3d_Channel@@UEAAPEAVChannelFeedback@@XZ
?GetInternalChild@A3d_Channel@@UEAAPEAV1@H@Z
?GetTimeStamp@A3d_Channel@@UEAAKXZ
?LoadChannel@A3d_Channel@@UEAA_NAEAVA3dFileLoader@@PEAVA3d_ChannelGroup@@@Z
?OneTimeInitialize@A3d_Channel@@UEAAXXZ
?SaveChannel@A3d_Channel@@UEAA_NAEAVA3dFileSaver@@@Z
?SetChannelGroup@A3d_Channel@@UEAAXPEAVA3d_ChannelGroup@@@Z
?SetChannelInterfaceType@A3d_Channel@@UEAAXH@Z
?SetContextRenderCountName@A3d_Channel@@UEAAXPEAD@Z
?SetTimeStamp@A3d_Channel@@UEAAXXZ
?globalEngine@@3PEAVEngineInterface@@EA
??0A3d_Channel@@QEAA@AEBV0@@Z
??4A3d_Channel@@QEAAAEAV0@AEBV0@@Z

ole32

CoCreateInstance
CoUninitialize
CoInitialize

vcruntime140

__std_exception_destroy
__std_terminate
memset
__CxxFrameHandler3
__C_specific_handler
__std_exception_copy
_CxxThrowException
__std_type_info_destroy_list

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_cexit
terminate
_execute_onexit_table
_initialize_onexit_table
_initterm
_configure_narrow_argv
_seh_filter_dll
_initterm_e

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc

kernel32

IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
GetCurrentProcessId
RtlCaptureContext
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter

Exports

Exports

??0Aco_DX8_DirectSoundChannel@@QEAA@AEBV0@@Z
??0Aco_DX8_DirectSoundChannel@@QEAA@XZ
??1Aco_DX8_DirectSoundChannel@@UEAA@XZ
??4Aco_DX8_DirectSoundChannel@@QEAAAEAV0@AEBV0@@Z
??_7Aco_DX8_DirectSoundChannel@@6B@
?GetListener@Aco_DX8_DirectSoundChannel@@UEAAPEAUIDirectSound3DListener@@XZ
?GetLoader@Aco_DX8_DirectSoundChannel@@UEAAPEAUIDirectMusicLoader8@@XZ
?GetPerformance@Aco_DX8_DirectSoundChannel@@UEAAPEAUIDirectMusicPerformance8@@XZ
?InitDirectSound@Aco_DX8_DirectSoundChannel@@MEAAXXZ
?Release@Aco_DX8_DirectSoundChannel@@MEAAXXZ
?SetListenerFromPath@Aco_DX8_DirectSoundChannel@@UEAAXPEAUIDirectMusicAudioPath@@@Z
?SetSpeakerConfig@Aco_DX8_DirectSoundChannel@@UEAAXK@Z
GetType
InitDLL

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

87e7eb07db016fb871d798abc8d4bf4e

Headers

DLL Characteristics

File Characteristics

Imports

highpoly

ole32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 616B

.pdata Size: 1024B - Virtual size: 648B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 124B

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 616B

.pdata
Size: 1024B - Virtual size: 648B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 124B