easy_Benign_ff8503d94e4ca293c691a3a9ee0f3f5d0a23f13f1f157d6569ff326e1519a9ae[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

easy_Benign_ff8503d94e4ca293c691a3a9ee0f3f5d0a23f13f1f157d6569ff326e1519a9ae.dll
Size

13KB
MD5

c7a38985e4a537e8d27f2e586b11bd40
SHA1

98ceccefef5edf1b26a2a27cba136c4c118a6c0c
SHA256

ff8503d94e4ca293c691a3a9ee0f3f5d0a23f13f1f157d6569ff326e1519a9ae
SHA512

d28538d53837f0ed2d15726d51e5d9e8459c35a59c6ba85d96360e4f892c8b8f518b4dfccf961e5d9a71f6fc80e998bd9ce63b2808f513b703407f44ff454064
SSDEEP

192:ZVw1pTtx3TRUiH+rkEjAM6mYH+fpHJAyZJg8D0KThxA+rAQE+tnJiOSZ3XN6Z9m:s1ZL3TRn8jNfppJgLa0MpEd6Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
easy_Benign_ff8503d94e4ca293c691a3a9ee0f3f5d0a23f13f1f157d6569ff326e1519a9ae.dll

Files

easy_Benign_ff8503d94e4ca293c691a3a9ee0f3f5d0a23f13f1f157d6569ff326e1519a9ae.dll
.dll windows x64

ced49f185011258eacb4e50c8ed2c1a9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcr90

_amsg_exit
__C_specific_handler
__CppXcptFilter
_decode_pointer
_unlock
__dllonexit
_lock
_onexit
_encoded_null
_initterm_e
_initterm
_malloc_crt
_encode_pointer
calloc
__clean_type_info_names_internal
free
memcpy

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
Sleep
GetSystemTimeAsFileTime

Exports

Exports

Blowfish_start_operation
Blowfish_stop_operation
init_raw_blowfish

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ