easy_Benign_ff9333c30c84dd9ff0c105f3d74735a15f7454956101744256f08ea524f71ad6[.]dll

General

Target

easy_Benign_ff9333c30c84dd9ff0c105f3d74735a15f7454956101744256f08ea524f71ad6.dll
Size

9KB
MD5

b558d30a5442bcdb385a602b9c666810
SHA1

5f514d0c6eca77520e7e4962a799d894003bf88e
SHA256

ff9333c30c84dd9ff0c105f3d74735a15f7454956101744256f08ea524f71ad6
SHA512

ec647da6b0e7a046671c7a95f3c76247244e21038e166ce31cec737fdbdbdec21e8f821c506e4fcdc9c2a988c469143d8d22400d78b465ed440e4c44b70dced4
SSDEEP

96:chYDIYYaDX0UAwjwG+lnL0Ao05RDokOv0fAbY7wwqEJe6Rrf5S7fzszt7jPX:cKDPYh4UGiB5CkOvIIT7Yf5STQzt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
easy_Benign_ff9333c30c84dd9ff0c105f3d74735a15f7454956101744256f08ea524f71ad6.dll

Files

easy_Benign_ff9333c30c84dd9ff0c105f3d74735a15f7454956101744256f08ea524f71ad6.dll
.dll windows x86

04214ce461a4a97a22339c29fe3797d0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent

vcruntime140

__std_type_info_destroy_list
memset
_except_handler4_common
memcpy

api-ms-win-crt-heap-l1-1-0

free
calloc

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_initterm_e
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_register_onexit_function

Exports

Exports

OFB_decrypt
OFB_encrypt
OFB_start_operation
OFB_stop_operation
PyInit__raw_ofb

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

04214ce461a4a97a22339c29fe3797d0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 904B

.gfids Size: 512B - Virtual size: 20B

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 512B - Virtual size: 312B

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 904B

.gfids
Size: 512B - Virtual size: 20B

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 512B - Virtual size: 312B