easy_Benign_ffd86afdf8df9a00aa57738b2f565f6a603cfd3f36a03c60a033bb0d3ae40f6e[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

easy_Benign_ffd86afdf8df9a00aa57738b2f565f6a603cfd3f36a03c60a033bb0d3ae40f6e.dll
Size

20KB
MD5

517c92e4dac7333257d51e7f929344d1
SHA1

d9727e22bc16a1ee983bd267dcf5ea778c053a88
SHA256

ffd86afdf8df9a00aa57738b2f565f6a603cfd3f36a03c60a033bb0d3ae40f6e
SHA512

77f45881300387bb4408afc218bb371255a32688f7a4ecdac7ce87b8148e686d21321399e347787271ff8d28182e97733bcfd625d463162ea3f576beae990140
SSDEEP

384:Vg5VRsC0Gbh3pU6RLnhg3pl1IRcgzeWwXCcl:VGP0GbhjZoNScgXLc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
easy_Benign_ffd86afdf8df9a00aa57738b2f565f6a603cfd3f36a03c60a033bb0d3ae40f6e.dll

Files

easy_Benign_ffd86afdf8df9a00aa57738b2f565f6a603cfd3f36a03c60a033bb0d3ae40f6e.dll
.dll windows x64

838d4d5b2a385c36b3560fdecf64bf4c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

libadm_core6

ADM_info2
ADM_warning2

libadm_coreaudio6

_ZN7ADMXiph20admExtraData2packetsEPhiPS0_Pi

libadm_coreutils6

_Z7mixDumpPhj

libvorbis-0

vorbis_block_clear
vorbis_block_init
vorbis_comment_clear
vorbis_comment_init
vorbis_info_clear
vorbis_info_init
vorbis_synthesis
vorbis_synthesis_blockin
vorbis_synthesis_headerin
vorbis_synthesis_init
vorbis_synthesis_pcmout
vorbis_synthesis_read
vorbis_synthesis_restart

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__iob_func
_amsg_exit
_initterm
_lock
_unlock
abort
calloc
free
fwrite
memcpy
printf
realloc
signal
strlen
strncmp
vfprintf

libgcc_s_seh-1

_Unwind_Resume

libstdc++-6

_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZdlPv
_Znwy
__gxx_personality_seh0

Exports

Exports

_ZN10ADM_vorbis12isCompressedEv
_ZN10ADM_vorbis14resetAfterSeekEv
_ZN10ADM_vorbis16isDecompressableEv
_ZN10ADM_vorbis3runEPhjPfPj
_ZN10ADM_vorbisC1EjP9WAVHeaderjPh
_ZN10ADM_vorbisC2EjP9WAVHeaderjPh
_ZN10ADM_vorbisD0Ev
_ZN10ADM_vorbisD1Ev
_ZN10ADM_vorbisD2Ev
_ZN14ADM_Audiocodec14resetAfterSeekEv
_ZN14ADM_Audiocodec14updateChannelsEj
_ZN14ADM_Audiocodec17getOutputChannelsEv
_ZN14ADM_Audiocodec18getOutputFrequencyEv
_ZN14ADM_Audiocodec5purgeEv
_ZN14ADM_Audiocodec7isDummyEv
_ZTI10ADM_vorbis
_ZTI14ADM_Audiocodec
_ZTS10ADM_vorbis
_ZTS14ADM_Audiocodec
_ZTV10ADM_vorbis
create
destroy
getApiVersion
getDecoderVersion
getInfo
supportedFormat

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1024B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

838d4d5b2a385c36b3560fdecf64bf4c

Headers

File Characteristics

Imports

libadm_core6

libadm_coreaudio6

libadm_coreutils6

libvorbis-0

kernel32

msvcrt

libgcc_s_seh-1

libstdc++-6

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 152B

.rdata Size: 2KB - Virtual size: 2KB

.pdata Size: 1024B - Virtual size: 792B

.xdata Size: 1024B - Virtual size: 624B

.bss Size: - Virtual size: 2KB

.edata Size: 1024B - Virtual size: 960B

.idata Size: 3KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 512B - Virtual size: 132B

.text
Size: 9KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 152B

.rdata
Size: 2KB - Virtual size: 2KB

.pdata
Size: 1024B - Virtual size: 792B

.xdata
Size: 1024B - Virtual size: 624B

.bss
Size: - Virtual size: 2KB

.edata
Size: 1024B - Virtual size: 960B

.idata
Size: 3KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 512B - Virtual size: 132B