e[.]dll | Triage

Sharing

General

Target

e.dll
Size

308KB
MD5

0f287a050effd12fe6efefcd3e6dd23a
SHA1

d88a909c7736cff836f64c79f70027d98c179f82
SHA256

f969c4cb81ea79d7712bd1f6ef475d14a3e71e23d23e454a6525693378ba5bd0
SHA512

69401bbb11f80abc0798d4df0b9afd88ca87f98dc986786c7a12c448d46d700733e7b531d5ecb330894f17bde2804268fb410506511eefb94c396aa0fcb66ae7
SSDEEP

6144:looiWn86pDoTiXRRGq5ElTRr09fQ3Q8BTKh+DCAi4Kdgp:looiWn5JPdeyaKh+eyK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e.dll

Files

e.dll
.dll windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.text
Size: 88KB - Virtual size: 2048.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 2048.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 2048.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 2048.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 48KB - Virtual size: 2048.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2048.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ