KeyScramblerIE[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

KeyScramblerIE.dll
Size

535KB
MD5

85dd61ec4125ba45a136a5b40b7250de
SHA1

11b62716042d0552cba90ec3b04845750ed83e06
SHA256

9a74f605370ec682ff056e54e5e514c23fe1d2ca41f697a36ab2456f424479c6
SHA512

fd935077c5d627b11214452a92e54edce8fd89d04d0bbe282e89a3dc7f458caf75125f26e72009bf487e1e59cc48474cd40e1ce319b8bdf30e6ef107eb023c1a
SSDEEP

12288:dXIGpvVXUjFrQXlkJeOi7kTDQcBLUBE8FV3:dX3nuFQMa72nBL8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
KeyScramblerIE.dll

Files

KeyScramblerIE.dll
.dll regsvr32 windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DebugConnectWide
DebugCreate
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
KSFFInit
KSFFUninit
KSInit
KSOptions
KSPromptForKey
KSSetKeyInfo
KSSetOption
KSUninit
KSUpdate
__stack_chk_fail
__stack_chk_guard

Sections

CODE
Size: 471KB - Virtual size: 470KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 21KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ