easy_Benign_ffce0883ffd7893ffe9f8894ede94fb6994e0532de6bcfe9879e7db666e0d4a0[.]dll

General

Target

easy_Benign_ffce0883ffd7893ffe9f8894ede94fb6994e0532de6bcfe9879e7db666e0d4a0.dll
Size

10KB
MD5

d4c066c0b72caa058e92372ab1142386
SHA1

72080c15d33f60b18c59318e06c372dc9ad05714
SHA256

ffce0883ffd7893ffe9f8894ede94fb6994e0532de6bcfe9879e7db666e0d4a0
SHA512

881d1e8c4adacfbe508fd10f22fc8f41bb6f7e9582ae73cdb65d7fdbb4e6d9cc947d3f5da5572cf3f25816cc48dc24a3f5ed18da1b3502eeec48b6163f74093a
SSDEEP

192:MbcXQRRFjUCTMJ4jOUA3hAPSVcVS+M0cU:gUUhfMJ4jpAxAPSV7+MJU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
easy_Benign_ffce0883ffd7893ffe9f8894ede94fb6994e0532de6bcfe9879e7db666e0d4a0.dll

Files

easy_Benign_ffce0883ffd7893ffe9f8894ede94fb6994e0532de6bcfe9879e7db666e0d4a0.dll
.dll windows x86

ca6ee373f2375011de5d7d38717c4383

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeExW
VerQueryValueW
GetFileVersionInfoExW

kernel32

GetCurrentThreadId
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
InitializeSListHead
GetSystemTimeAsFileTime

vcruntime140

__std_type_info_destroy_list
memset
_except_handler4_common

api-ms-win-crt-runtime-l1-1-0

_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_cexit

Exports

Exports

??4CDownlevelVersionl110@@QAEAAV0@$$QAV0@@Z
??4CDownlevelVersionl110@@QAEAAV0@ABV0@@Z
?GetFileVersionInfoExW@CDownlevelVersionl110@@QAGHKPB_WKKPAX@Z
?GetFileVersionInfoSizeExW@CDownlevelVersionl110@@QAGKKPB_WPAK@Z
?VerQueryValueW@CDownlevelVersionl110@@QAGHPBXPB_WPAPAXPAI@Z
GetFileVersionInfoExW
GetFileVersionInfoSizeExW
VerQueryValueW

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 316B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca6ee373f2375011de5d7d38717c4383

Headers

DLL Characteristics

File Characteristics

Imports

version

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 912B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 316B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 912B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 316B