MADLib[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MADLib.dll
Size

136KB
MD5

ddd5260128b71698ba58390e21adcd96
SHA1

325ec37f136630a33767b251ad2ee8946451d9b1
SHA256

cc95e0a204b5d8dc4ff3eebd66ab79ba76874e7dcca61c25a80235a71868be75
SHA512

1eb5db9c93cbdc50caa04fb57ebb2a366f6cd411f988d1a73ef05513e4768c12077662fa43ce36fb24760db1f2e1ea9e4a543af498749da3afd298be84a3ce92
SSDEEP

3072:IllL3wOl6s5+qZ4hh5D69pF6RJtGB+jU6n4KoO:I/L3wi6sch0FiGAn4s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MADLib.dll

Files

MADLib.dll
.dll windows x86

c74e6b51537e1594b9c6c1c4f1154a61

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
GetVersion
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
DisableThreadLibraryCalls
WriteFile
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
GetLastError
SetFilePointer
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
RtlUnwind
FlushFileBuffers
CloseHandle

Exports

Exports

mad_decoder_finish
mad_decoder_init
mad_decoder_message
mad_decoder_run
mad_stream_buffer
mad_stream_skip
mad_stream_sync

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ