easy_Benign_ffed0bf8c4daefe6cbac6c8e93f65f4248d37721cc3be7743dcabf3aecb76c6e[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

easy_Benign_ffed0bf8c4daefe6cbac6c8e93f65f4248d37721cc3be7743dcabf3aecb76c6e.dll
Size

19KB
MD5

eb6d93c4c2df9d4095331e9744a90b08
SHA1

08f6f9f8ca82b4b33eb61c80a2c6260d7809dc80
SHA256

ffed0bf8c4daefe6cbac6c8e93f65f4248d37721cc3be7743dcabf3aecb76c6e
SHA512

137d0c6d991b43e59305331c4fe0013071a16c4c33ad95b53163991c7852eebdcaacfa500eda9a63c49009f04f7ba03d38e30bf08e5dd584c410586228b09cb5
SSDEEP

384:khMJfZAc7+3laYj1rJjOmCFxPhkKZj25LmfGrF:khColaS1rxd+er1mer

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
easy_Benign_ffed0bf8c4daefe6cbac6c8e93f65f4248d37721cc3be7743dcabf3aecb76c6e.dll

Files

easy_Benign_ffed0bf8c4daefe6cbac6c8e93f65f4248d37721cc3be7743dcabf3aecb76c6e.dll
.dll windows x86

9f1d3d065710292d9b7ad07bbab97e6b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

qt5gui

?currentImageRect@QImageIOHandler@@UBE?AVQRect@@XZ
?setFormat@QImageIOHandler@@QAEXABVQByteArray@@@Z
?staticMetaObject@QImageIOPlugin@@2UQMetaObject@@B
?qt_metacast@QImageIOPlugin@@UAEPAXPBD@Z
?qt_metacall@QImageIOPlugin@@UAEHW4Call@QMetaObject@@HPAPAX@Z
??0QImageIOPlugin@@QAE@PAVQObject@@@Z
??1QImageIOPlugin@@UAE@XZ
??0QImage@@QAE@$$QAV0@@Z
??0QImage@@QAE@HHW4Format@0@@Z
??0QImage@@QAE@XZ
?setPixel@QImage@@QAEXHHI@Z
??4QImage@@QAEAAV0@$$QAV0@@Z
??1QImage@@UAE@XZ
?isNull@QImage@@QBE_NXZ
??0QImageIOHandler@@QAE@XZ
??1QImageIOHandler@@UAE@XZ
?device@QImageIOHandler@@QBEPAVQIODevice@@XZ
?setFormat@QImageIOHandler@@QBEXABVQByteArray@@@Z
?write@QImageIOHandler@@UAE_NABVQImage@@@Z
?jumpToNextImage@QImageIOHandler@@UAE_NXZ
?jumpToImage@QImageIOHandler@@UAE_NH@Z
?loopCount@QImageIOHandler@@UBEHXZ
?imageCount@QImageIOHandler@@UBEHXZ
?nextImageDelay@QImageIOHandler@@UBEHXZ
?currentImageNumber@QImageIOHandler@@UBEHXZ
?setDevice@QImageIOHandler@@QAEXPAVQIODevice@@@Z

qt5core

?isOpen@QIODevice@@QBE_NXZ
?dynamicMetaObject@QObjectData@@QBEPAUQMetaObject@@XZ
??0QByteArray@@QAE@PBDH@Z
?warning@QMessageLogger@@QBAXPBDZZ
??0QVariant@@QAE@H@Z
??0QVariant@@QAE@ABVQSize@@@Z
??0QVariant@@QAE@XZ
??1QByteArray@@QAE@XZ
??0QMessageLogger@@QAE@PBDH0@Z
?getChar@QIODevice@@QAE_NPAD@Z
?read@QIODevice@@QAE_JPAD_J@Z
?isReadable@QIODevice@@QBE_NXZ
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z
??1QString@@QAE@XZ
??0QString@@QAE@XZ
??4QString@@QAEAAV0@$$QAV0@@Z
?getAndRef@ExternalRefCountData@QtSharedPointer@@SAPAU12@PBVQObject@@@Z
?qstrcmp@@YAHABVQByteArray@@PBD@Z
?disconnectNotify@QObject@@MAEXABVQMetaMethod@@@Z
?connectNotify@QObject@@MAEXABVQMetaMethod@@@Z
?customEvent@QObject@@MAEXPAVQEvent@@@Z
?childEvent@QObject@@MAEXPAVQChildEvent@@@Z
?timerEvent@QObject@@MAEXPAVQTimerEvent@@@Z
?eventFilter@QObject@@UAE_NPAV1@PAVQEvent@@@Z
?event@QObject@@UAE_NPAVQEvent@@@Z

kernel32

InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetProcAddress
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CloseHandle

vcruntime140

_purecall
__CxxFrameHandler3
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memset
_except_handler4_common
__std_type_info_destroy_list

api-ms-win-crt-string-l1-1-0

strncmp

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
free

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_seh_filter_dll
_execute_onexit_table
_crt_atexit
_cexit
_register_onexit_function
_initterm
_initterm_e

Exports

Exports

qt_plugin_instance
qt_plugin_query_metadata

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qtmetad
Size: 512B - Virtual size: 117B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9f1d3d065710292d9b7ad07bbab97e6b

Headers

DLL Characteristics

File Characteristics

Imports

qt5gui

qt5core

kernel32

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 1KB

.qtmetad Size: 512B - Virtual size: 117B

.rsrc Size: 1024B - Virtual size: 832B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 1KB

.qtmetad
Size: 512B - Virtual size: 117B

.rsrc
Size: 1024B - Virtual size: 832B

.reloc
Size: 1KB - Virtual size: 1KB