easy_Benign_ff4bdf415430574a208c1579242d6888b2372e3d9ad5769a57ab4306db878ae7[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

easy_Benign_ff4bdf415430574a208c1579242d6888b2372e3d9ad5769a57ab4306db878ae7.dll
Size

22KB
MD5

37c5f39baae494de1bf62c6e9ff61924
SHA1

d023c4ec44e1237b6915b91b015ff6cb0781584b
SHA256

ff4bdf415430574a208c1579242d6888b2372e3d9ad5769a57ab4306db878ae7
SHA512

f3cb4fd478a23db931b7854b2b305ab8fbcca9fffa962c368fad9813c185c15313037fc437e6409ea728cf8c04a89476afe8b7a181156e51941e2e76ae8e1513
SSDEEP

384:IWU9Y0hrqTLh9J/H7mbeN/799Zh3NjmAluwzPv/:LUO+qHh97z9Z3cqH

Score

1^/10

Malware Config

Signatures

Files

easy_Benign_ff4bdf415430574a208c1579242d6888b2372e3d9ad5769a57ab4306db878ae7.dll
.dll windows x86

f80430b72a0822981983ec78008360cd

Code Sign

33:00:00:00:25:3a:27:38:69:0a:34:51:c1:00:00:00:00:00:25
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/09/2018, 21:30

Not After

06/09/2019, 21:30

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/10/2014, 20:31

Not After

15/10/2029, 20:41

Subject

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

23:d8:50:a4:56:07:ae:57:03:82:cd:c9:c2:ba:bc:83:a8:cf:28:0f:cb:38:37:08:41:fa:d9:ed:94:7d:bd:76
Signer

Actual PE Digest

23:d8:50:a4:56:07:ae:57:03:82:cd:c9:c2:ba:bc:83:a8:cf:28:0f:cb:38:37:08:41:fa:d9:ed:94:7d:bd:76

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_except_handler4_common
_adjust_fdiv
_amsg_exit
_initterm
free
malloc
_XcptFilter
memset

kernel32

CreateThread
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
OutputDebugStringA
DeviceIoControl
CreateFileA
GetPrivateProfileIntA
CloseHandle
FindFirstFileA
GetCurrentDirectoryA
GlobalFree
GlobalUnlock
WaitForSingleObject
SetEvent
ResetEvent
WaitForMultipleObjects
GetLastError
CreateEventA
InterlockedExchange
GlobalLock
GlobalAlloc

user32

wsprintfA

winmm

waveOutGetNumDevs
midiOutGetDevCapsA
midiOutGetNumDevs
waveInGetDevCapsA
waveInGetNumDevs
waveOutGetDevCapsA
midiOutOpen
waveOutOpen
waveInClose
midiOutClose
waveOutClose
waveInOpen

Exports

Exports

AC3_ByteCount
AC3_BytesAccepted
AC3_Close
AC3_DataFrames
AC3_DeviceCount
AC3_DeviceInfo
AC3_Flush
AC3_FrameCount
AC3_NotifyEvent
AC3_Open
AC3_Reset
AC3_SampleCount
AC3_SampleRate
AC3_SetXferMode
AC3_Start
AC3_Stop
GetAC3FunctionTable

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f80430b72a0822981983ec78008360cd

Code Sign

33:00:00:00:25:3a:27:38:69:0a:34:51:c1:00:00:00:00:00:25Certificate

Extended Key Usages

33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0dCertificate

Key Usages

23:d8:50:a4:56:07:ae:57:03:82:cd:c9:c2:ba:bc:83:a8:cf:28:0f:cb:38:37:08:41:fa:d9:ed:94:7d:bd:76Signer

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

user32

winmm

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 9KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 944B

.reloc Size: 1024B - Virtual size: 940B

33:00:00:00:25:3a:27:38:69:0a:34:51:c1:00:00:00:00:00:25
Certificate

33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d
Certificate

23:d8:50:a4:56:07:ae:57:03:82:cd:c9:c2:ba:bc:83:a8:cf:28:0f:cb:38:37:08:41:fa:d9:ed:94:7d:bd:76
Signer

.text
Size: 9KB - Virtual size: 9KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 944B

.reloc
Size: 1024B - Virtual size: 940B