easy_Benign_ffca7f0bd68b77343b6d575b02afafc2b455d7c7f03a60cc089dbfe5798f5b01[.]dll | Triage

Sharing

General

Target

easy_Benign_ffca7f0bd68b77343b6d575b02afafc2b455d7c7f03a60cc089dbfe5798f5b01.dll
Size

10KB
MD5

a25fbac1448476ad3b9f0405a872f95b
SHA1

e960ae30f09afe5d6117d71878f47c1769603f97
SHA256

ffca7f0bd68b77343b6d575b02afafc2b455d7c7f03a60cc089dbfe5798f5b01
SHA512

5af22ea62741b2d75379e0a20f3be77f16810635ff779d2a9d9567cced2150bd940c0f8936394c93979b2ec02679a9ab8b90c38de3a6d0ed8e01a2b99e3e9469
SSDEEP

192:NPdpU+xRZBsggBVvskOwPzaLPK7Mv3Qfzac:3TdfgfvskOwP2tY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
easy_Benign_ffca7f0bd68b77343b6d575b02afafc2b455d7c7f03a60cc089dbfe5798f5b01.dll

Files

easy_Benign_ffca7f0bd68b77343b6d575b02afafc2b455d7c7f03a60cc089dbfe5798f5b01.dll
.dll windows x86

f39b96b81dc0facb37c81ad86c8ac5c6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

libapriconv-1

apr_iconv_mod_noevent

kernel32

SetUnhandledExceptionFilter
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent

vcruntime140

_except_handler4_common
__std_type_info_destroy_list
memset

api-ms-win-crt-runtime-l1-1-0

_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit

Exports

Exports

iconv_module

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ