Benign_ffbc83457b6d7866b58989abdb55dbac870fa5ee68b0921a29e627feed4572cc[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

Benign_ffbc83457b6d7866b58989abdb55dbac870fa5ee68b0921a29e627feed4572cc.dll
Size

23KB
MD5

95d03c01986a1319f30548d6cff0d8bc
SHA1

fc9848263343582a51934446fb4e0dd275b14560
SHA256

ffbc83457b6d7866b58989abdb55dbac870fa5ee68b0921a29e627feed4572cc
SHA512

afd0cd9011072cbd0dc11b62db6ba86360b93506cf5c681d5683ee49788eb42dec3683859bfd6eef6df765476e1dedb21cecd5d603624fdb5eec10d8c2fa420f
SSDEEP

384:sJRSAbNIcA6Ew0duHIgnLX6EBTftu70flzUyDR4ErpSAkwAowspPx:yRSXw4uHLrdzUyDR4wAowUJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Benign_ffbc83457b6d7866b58989abdb55dbac870fa5ee68b0921a29e627feed4572cc.dll

Files

Benign_ffbc83457b6d7866b58989abdb55dbac870fa5ee68b0921a29e627feed4572cc.dll
.dll windows x64

ad591ea0e147a1bc6d768866c50ca7af

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

qt5qml

?staticMetaObject@QQmlDebugConnector@@2UQMetaObject@@B

qt5network

?staticMetaObject@QTcpServer@@2UQMetaObject@@B
?qt_metacast@QTcpServer@@UEAAPEAXPEBD@Z
?qt_metacall@QTcpServer@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?nextPendingConnection@QTcpServer@@UEAAPEAVQTcpSocket@@XZ
?metaObject@QTcpServer@@UEBAPEBUQMetaObject@@XZ
?incomingConnection@QTcpServer@@MEAAX_J@Z
?hasPendingConnections@QTcpServer@@UEBA_NXZ
?newConnection@QTcpServer@@QEAAXXZ
?waitForNewConnection@QTcpServer@@QEAA_NHPEA_N@Z
?listen@QTcpServer@@QEAA_NAEBVQHostAddress@@G@Z
??1QTcpServer@@UEAA@XZ
??0QTcpServer@@QEAA@PEAVQObject@@@Z
?setAddress@QHostAddress@@QEAA_NAEBVQString@@@Z
??4QHostAddress@@QEAAAEAV0@W4SpecialAddress@0@@Z
??1QHostAddress@@QEAA@XZ
??0QHostAddress@@QEAA@XZ
?flush@QAbstractSocket@@QEAA_NXZ
?state@QAbstractSocket@@QEBA?AW4SocketState@1@XZ
?peerPort@QAbstractSocket@@QEBAGXZ

qt5core

?warning@QMessageLogger@@QEBAXPEBDZZ
??0QString@@QEAA@XZ
??1QString@@QEAA@XZ
??4QString@@QEAAAEAV0@AEBV0@@Z
??8QString@@QEBA_NVQLatin1String@@@Z
??1Connection@QMetaObject@@QEAA@XZ
?dynamicMetaObject@QObjectData@@QEBAPEAUQMetaObject@@XZ
??0QObject@@QEAA@PEAV0@@Z
??1QObject@@UEAA@XZ
?setParent@QObject@@QEAAXPEAV1@@Z
?deleteLater@QObject@@QEAAXXZ
??0QMessageLogger@@QEAA@PEBDH0@Z
?childEvent@QObject@@MEAAXPEAVQChildEvent@@@Z
?connectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?customEvent@QObject@@MEAAXPEAVQEvent@@@Z
?disconnectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?event@QObject@@UEAA_NPEAVQEvent@@@Z
?eventFilter@QObject@@UEAA_NPEAV1@PEAVQEvent@@@Z
?timerEvent@QObject@@MEAAXPEAVQTimerEvent@@@Z
?getAndRef@ExternalRefCountData@QtSharedPointer@@SAPEAU12@PEBVQObject@@@Z
?staticMetaObject@QObject@@2UQMetaObject@@B
?qt_metacast@QObject@@UEAAPEAXPEBD@Z
?qt_metacall@QObject@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?debug@QMessageLogger@@QEBAXPEBDZZ
?connectImpl@QObject@@CA?AVConnection@QMetaObject@@PEBV1@PEAPEAX01PEAVQSlotObjectBase@QtPrivate@@W4ConnectionType@Qt@@PEBHPEBU3@@Z

kernel32

LeaveCriticalSection
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetProcAddress
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
CloseHandle
InitializeSListHead

vcruntime140

__C_specific_handler
__std_terminate
__CxxFrameHandler3
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memset
__std_type_info_destroy_list

api-ms-win-crt-string-l1-1-0

strcmp

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_initterm_e

Exports

Exports

qt_plugin_instance
qt_plugin_query_metadata

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 804B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qtmetad
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ad591ea0e147a1bc6d768866c50ca7af

Headers

DLL Characteristics

File Characteristics

Imports

qt5qml

qt5network

qt5core

kernel32

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 1024B - Virtual size: 872B

.pdata Size: 1024B - Virtual size: 804B

.qtmetad Size: 512B - Virtual size: 276B

.rsrc Size: 1024B - Virtual size: 832B

.reloc Size: 512B - Virtual size: 216B

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 1024B - Virtual size: 872B

.pdata
Size: 1024B - Virtual size: 804B

.qtmetad
Size: 512B - Virtual size: 276B

.rsrc
Size: 1024B - Virtual size: 832B

.reloc
Size: 512B - Virtual size: 216B