easy_Benign_ffdc389b18eb6a8194939ff991b7f0525f42d9df4eb25dce64d1957cd717adc0[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

easy_Benign_ffdc389b18eb6a8194939ff991b7f0525f42d9df4eb25dce64d1957cd717adc0.dll
Size

22KB
MD5

dcbcedd3823eef10540c6cb90515f096
SHA1

c36b3e81d93a276e22c625a6ec2101825c10de12
SHA256

ffdc389b18eb6a8194939ff991b7f0525f42d9df4eb25dce64d1957cd717adc0
SHA512

323de242f0a7709d198901f5e3af847d46e7ce117963eb71d6250b0cabccc75bd13d0c2950a6d94234069e16397fc47e5d4970170ff82b747f60f603673060d5
SSDEEP

384:q5az0jQxXIADXiX2S+resL8JAeHGMNt8LnkVrmjEqsro37H6D:q5agjQxLVeHDynk1m4q2eHK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
easy_Benign_ffdc389b18eb6a8194939ff991b7f0525f42d9df4eb25dce64d1957cd717adc0.dll

Files

easy_Benign_ffdc389b18eb6a8194939ff991b7f0525f42d9df4eb25dce64d1957cd717adc0.dll
.dll windows x64

15a39e05781ce21078b8b617f0438929

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

fitools

??0NumericType@EmbeddedTypeSystem@@QEAA@_NHH@Z
?getGlobalFimath@fimath@@SAAEAV1@XZ
??1NumericType@EmbeddedTypeSystem@@UEAA@XZ
??0fi@@QEAA@NAEBVNumericType@EmbeddedTypeSystem@@AEBVfimath@@IV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_NW4OperationTypeEnum@embedded@@@Z
?getFiFromMxArray@fi@@SAAEAV1@PEBUmxArray_tag@@@Z
??Dfi@@QEBAAEAV0@AEBV0@@Z
??Gfi@@QEBAAEAV0@AEBV0@@Z
??Hfi@@QEBAAEAV0@AEBV0@@Z
??Xfi@@QEAAAEAV0@AEBV0@@Z
??Zfi@@QEAAAEAV0@AEBV0@@Z
??4fi@@QEAAAEAV0@H@Z
??4fi@@QEAAAEAV0@AEBV0@@Z
??Afi@@QEAAAEAV0@_K@Z
??Afi@@QEBAAEBV0@_K@Z
?getDimension@fi@@QEBA_K_K@Z
??1fi@@UEAA@XZ

libmex

mexErrMsgIdAndTxt_800

libmx

?mxGetField@mx_array_api@noninlined@detail@matrix@@YAPEAUmxArray_tag@@PEBU5@_KPEBD@Z

msvcp140

?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ

vcruntime140

__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
memset
memmove
_CxxThrowException
__CxxFrameHandler3
memcpy
__C_specific_handler

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
terminate
_crt_atexit
_crt_at_quick_exit
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_cexit

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
free

kernel32

GetModuleHandleW
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter

Exports

Exports

mexFunction
mexfilerequiredapiversion

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

15a39e05781ce21078b8b617f0438929

Headers

DLL Characteristics

File Characteristics

Imports

fitools

libmex

libmx

msvcp140

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 432B

.pdata Size: 1024B - Virtual size: 912B

.gfids Size: 512B - Virtual size: 52B

.reloc Size: 512B - Virtual size: 60B

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 432B

.pdata
Size: 1024B - Virtual size: 912B

.gfids
Size: 512B - Virtual size: 52B

.reloc
Size: 512B - Virtual size: 60B