easy_Benign_ff9f79d0b6daf6d92d0f8cf7ce2475aea2882fffe77afd3f8ebc07ce2b46ae3a[.]dll

General

Target

easy_Benign_ff9f79d0b6daf6d92d0f8cf7ce2475aea2882fffe77afd3f8ebc07ce2b46ae3a.dll
Size

11KB
MD5

7e34a2992baa97af35975cb2a61ec0cf
SHA1

8a762d29e3021e9c582245fb40af64443835eb94
SHA256

ff9f79d0b6daf6d92d0f8cf7ce2475aea2882fffe77afd3f8ebc07ce2b46ae3a
SHA512

6c0339c49cc3713ea3f4010e55386e394565f17bfcab127996632ed5079216c4285912663a3b0a26a2aa3eb9a733deb43a7015764caeca53287427782d0a4405
SSDEEP

192:g6DI4iYVeOB8crJBkOkzxhZALpRf5ST6ztUo:tI4pVnKcVBkOkzxuprSTEU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
easy_Benign_ff9f79d0b6daf6d92d0f8cf7ce2475aea2882fffe77afd3f8ebc07ce2b46ae3a.dll

Files

easy_Benign_ff9f79d0b6daf6d92d0f8cf7ce2475aea2882fffe77afd3f8ebc07ce2b46ae3a.dll
.dll windows x86

24f3db7d2512463f4082c890904ddf70

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent

vcruntime140

__std_type_info_destroy_list
memset
_except_handler4_common
memcpy

api-ms-win-crt-heap-l1-1-0

free
calloc

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_execute_onexit_table
_crt_atexit
_cexit
_wassert
_register_onexit_function

Exports

Exports

PyInit__poly1305
poly1305_destroy
poly1305_digest
poly1305_init
poly1305_update

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

24f3db7d2512463f4082c890904ddf70

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 1KB

.gfids Size: 512B - Virtual size: 20B

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 512B - Virtual size: 360B

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 1KB

.gfids
Size: 512B - Virtual size: 20B

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 512B - Virtual size: 360B