easy_Benign_ff9b5bf421434c6537904a5aa0ede674aeac1378015e4bc64fcc342e8736bf9c[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

easy_Benign_ff9b5bf421434c6537904a5aa0ede674aeac1378015e4bc64fcc342e8736bf9c.dll
Size

23KB
MD5

e7cedf484165b8ceb38712c260329304
SHA1

d9af2f981ce7dc4cdc44703f3e8ef06b6bca20c4
SHA256

ff9b5bf421434c6537904a5aa0ede674aeac1378015e4bc64fcc342e8736bf9c
SHA512

339140fcf24cfd615417474ddc428194421f2470c7e7b6685b11d635013e6b3a4476138f862e1b128134c9d19c5d1a0a1bcc370aa3ef3b2e85cef48c17d1a8cd
SSDEEP

192:kYHhhFBv218xC85J2Jj2x10LnLpcyU7KSnbLyAsfH5apcyU7KSnbLyAqHJ656ehn:XhhFRxcJ6QzLpcp5yScO1T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
easy_Benign_ff9b5bf421434c6537904a5aa0ede674aeac1378015e4bc64fcc342e8736bf9c.dll

Files

easy_Benign_ff9b5bf421434c6537904a5aa0ede674aeac1378015e4bc64fcc342e8736bf9c.dll
.dll regsvr32 windows x86

0a916fde6499ea36804b1c7d02304dae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

DisableThreadLibraryCalls
HeapAlloc
HeapFree
HeapReAlloc
RaiseException
Sleep
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
SetUnhandledExceptionFilter
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

_amsg_exit
_initterm
_lock
_unlock
_iob
abort
calloc
free
fwrite
strlen
strncmp
vfprintf

Exports

Exports

DRMAcquireAdvisories
DRMAcquireIssuanceLicenseTemplate
DRMAcquireLicense
DRMActivate
DRMAddLicense
DRMAddRightWithUser
DRMAttest
DRMCheckSecurity
DRMClearAllRights
DRMCloseEnvironmentHandle
DRMCloseHandle
DRMClosePubHandle
DRMCloseQueryHandle
DRMCloseSession
DRMConstructCertificateChain
DRMCreateBoundLicense
DRMCreateClientSession
DRMCreateEnablingBitsDecryptor
DRMCreateEnablingBitsEncryptor
DRMCreateEnablingPrincipal
DRMCreateIssuanceLicense
DRMCreateLicenseStorageSession
DRMCreateRight
DRMCreateUser
DRMDecode
DRMDeconstructCertificateChain
DRMDecrypt
DRMDeleteLicense
DRMDuplicateEnvironmentHandle
DRMDuplicateHandle
DRMDuplicatePubHandle
DRMDuplicateSession
DRMEncode
DRMEncrypt
DRMEnumerateLicense
DRMGetApplicationSpecificData
DRMGetBoundLicenseAttribute
DRMGetBoundLicenseAttributeCount
DRMGetBoundLicenseObject
DRMGetBoundLicenseObjectCount
DRMGetCertificateChainCount
DRMGetClientVersion
DRMGetEnvironmentInfo
DRMGetInfo
DRMGetIntervalTime
DRMGetIssuanceLicenseInfo
DRMGetIssuanceLicenseTemplate
DRMGetMetaData
DRMGetNameAndDescription
DRMGetOwnerLicense
DRMGetProcAddress
DRMGetRevocationPoint
DRMGetRightExtendedInfo
DRMGetRightInfo
DRMGetSecurityProvider
DRMGetServiceLocation
DRMGetSignedIssuanceLicense
DRMGetSignedIssuanceLicenseEx
DRMGetTime
DRMGetUnboundLicenseAttribute
DRMGetUnboundLicenseAttributeCount
DRMGetUnboundLicenseObject
DRMGetUnboundLicenseObjectCount
DRMGetUsagePolicy
DRMGetUserInfo
DRMGetUserRights
DRMGetUsers
DRMInitEnvironment
DRMIsActivated
DRMIsWindowProtected
DRMLoadLibrary
DRMParseUnboundLicense
DRMRegisterContent
DRMRegisterProtectedWindow
DRMRegisterRevocationList
DRMRepair
DRMSetApplicationSpecificData
DRMSetGlobalOptions
DRMSetIntervalTime
DRMSetMetaData
DRMSetNameAndDescription
DRMSetRevocationPoint
DRMSetUsagePolicy
DRMVerify
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
__AddMachineCertToLicenseStore

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 940B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0a916fde6499ea36804b1c7d02304dae

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 32B

.rodata Size: 2KB - Virtual size: 1KB

.rdata Size: 1024B - Virtual size: 704B

.bss Size: - Virtual size: 940B

.edata Size: 7KB - Virtual size: 6KB

.idata Size: 1KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 8B

.reloc Size: 1024B - Virtual size: 840B

.text
Size: 8KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 32B

.rodata
Size: 2KB - Virtual size: 1KB

.rdata
Size: 1024B - Virtual size: 704B

.bss
Size: - Virtual size: 940B

.edata
Size: 7KB - Virtual size: 6KB

.idata
Size: 1KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 8B

.reloc
Size: 1024B - Virtual size: 840B