easy_Benign_ff80e038e2917e9b1656a88eca9e9471178d594aebcab9bfba5f78daf5509405[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

easy_Benign_ff80e038e2917e9b1656a88eca9e9471178d594aebcab9bfba5f78daf5509405.dll
Size

15KB
MD5

19be6fece20fcc0804417bffbbc93d15
SHA1

2604587db432f2f3255e7c37cfee472bd37ca07c
SHA256

ff80e038e2917e9b1656a88eca9e9471178d594aebcab9bfba5f78daf5509405
SHA512

124a2614a5339b90c3b0d71c995d3e720900b4a7f789034bb5980eaad92c93afaf65d18b9b37500040580bde7e980ad8cdfc9eecd54a47031cf803e4981004db
SSDEEP

192:w/qCTJfVU+jER3X963BpwDWpHTyFonI7CYux0dEuasnZHvEDF:wyCTJfVtAtN6RpwDGyonlK/PnhcR

Score

1^/10

Malware Config

Signatures

Files

easy_Benign_ff80e038e2917e9b1656a88eca9e9471178d594aebcab9bfba5f78daf5509405.dll
.dll windows x64

6a9b2c610f7015156efcd687c5f40b89

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0f:d7:4d:bd:5f:a2:8f:ef:b3:7f:37:67:73:24:bd:92
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

12-04-2017 00:00

Not After

27-05-2020 12:00

Subject

CN=Azul Systems\, Inc.,O=Azul Systems\, Inc.,L=Sunnyvale,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04-01-2017 00:00

Not After

18-01-2028 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c7:f2:07:c1:9f:35:05:49:b0:49:d7:ce:dd:1b:6d:61:1b:8d:b4:db:8f:fd:59:ad:ea:32:57:2a:3f:82:95:aa
Signer

Actual PE Digest

c7:f2:07:c1:9f:35:05:49:b0:49:d7:ce:dd:1b:6d:61:1b:8d:b4:db:8f:fd:59:ad:ea:32:57:2a:3f:82:95:aa

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

awt

DSGetDrawingSurface
DSFreeDrawingSurface
DSLockAWT
DSUnlockAWT
DSGetComponent

msvcr100

_encoded_null
_amsg_exit
free
__CppXcptFilter
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_initterm_e
_initterm
_malloc_crt
__C_specific_handler

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
Sleep
DecodePointer
EncodePointer
DisableThreadLibraryCalls

Exports

Exports

JAWT_GetAWT

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6a9b2c610f7015156efcd687c5f40b89

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

0f:d7:4d:bd:5f:a2:8f:ef:b3:7f:37:67:73:24:bd:92Certificate

Extended Key Usages

Key Usages

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41Certificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

c7:f2:07:c1:9f:35:05:49:b0:49:d7:ce:dd:1b:6d:61:1b:8d:b4:db:8f:fd:59:ad:ea:32:57:2a:3f:82:95:aaSigner

Headers

DLL Characteristics

File Characteristics

Imports

awt

msvcr100

kernel32

Exports

Exports

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 96B

.pdata Size: 512B - Virtual size: 180B

.rsrc Size: 1024B - Virtual size: 876B

.reloc Size: 512B - Virtual size: 24B

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

0f:d7:4d:bd:5f:a2:8f:ef:b3:7f:37:67:73:24:bd:92
Certificate

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

c7:f2:07:c1:9f:35:05:49:b0:49:d7:ce:dd:1b:6d:61:1b:8d:b4:db:8f:fd:59:ad:ea:32:57:2a:3f:82:95:aa
Signer

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 96B

.pdata
Size: 512B - Virtual size: 180B

.rsrc
Size: 1024B - Virtual size: 876B

.reloc
Size: 512B - Virtual size: 24B