d19d5523e41439278c80d097d8ba50c5c1747d00c81df1b0203bf55934d5d298[.]dll | Triage

Sharing

General

Target

d19d5523e41439278c80d097d8ba50c5c1747d00c81df1b0203bf55934d5d298.dll
Size

183KB
MD5

2204b04fe7bed27f37ffa2a366734791
SHA1

92490c7bcb27049fd19fc9e105cffc225e4cbb0d
SHA256

d19d5523e41439278c80d097d8ba50c5c1747d00c81df1b0203bf55934d5d298
SHA512

639dd78b8de9c7285c0e4f2aff09da8411acfd52f388001168bcdfb4fe49caab113ac82fd280b66478a90d7c58a78704f2b2ddda265e327ba4231d19c11a5a33
SSDEEP

3072:h0ZTRq4HbdR9lxg53mYRq4QN9g07MfCs4abDT+2xxslmwGxoRA6Qzf:hYRq4H5lw69gr00D62vqmLvzf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d19d5523e41439278c80d097d8ba50c5c1747d00c81df1b0203bf55934d5d298.dll

Files

d19d5523e41439278c80d097d8ba50c5c1747d00c81df1b0203bf55934d5d298.dll
.dll windows:5 windows x64 arch:x64

c5aca613cdbca1a107cbcafb8b31f396

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
ExitThread
LocalFree
CreateProcessA
InitializeCriticalSection
DeleteCriticalSection
ReadFile
CreatePipe
PeekNamedPipe
WaitForSingleObject
Sleep

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl

Exports

Exports

ReflectiveLoader

Sections

.text
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ