eappprxy[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

eappprxy.dll
Size

55KB
MD5

666e57b6b51824d1d235f80a3dd70a13
SHA1

38db296bac848eae3b23b6cd9af7980b0ef3bde2
SHA256

b2accabdd5d8b23e502fe691c1dee4a2c0ea20edcde5b4000557579d56d411ec
SHA512

765f99c870e473a1eaaedd0c7a897042180f4dfd8e86af2fad403c09c8e6b311f0214cbcb7dd586dad6eaff892dbb519e9a9de0c082e02f2a2fcc80c82e1fb07
SSDEEP

768:YxkfuZ//S/L/Tbe2b/P2BS7ktM/l9St5Uiu9K7U+Vgatt0XuIrXNBNDgjxkE7m1w:QIbe2rqEriuGggtG9BN9EgL2o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eappprxy.dll

Files

eappprxy.dll
.dll windows:6 windows x86 arch:x86

f2dafba499d107a4dcc444f825ba7eda

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

eappprxy.pdb

Imports

msvcrt

_vsnprintf
_onexit
_lock
__dllonexit
_unlock
_except_handler4_common
??1type_info@@UAE@XZ
_amsg_exit
_initterm
free
malloc
_XcptFilter
wcsrchr
memcpy
??0exception@@QAE@XZ
_CxxThrowException
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
?what@exception@@UBEPBDXZ
??0exception@@QAE@ABQBD@Z
memmove_s
memcpy_s
__CxxFrameHandler3
_beginthreadex
memset

ntdll

DbgPrint
EtwEventEnabled
EtwTraceMessage
EtwEventWrite
EtwEventUnregister
EtwEventRegister
EtwUnregisterTraceGuids
EtwRegisterTraceGuidsW
EtwGetTraceLoggerHandle
EtwGetTraceEnableLevel
EtwGetTraceEnableFlags

kernel32

EnterCriticalSection
GetCurrentThreadId
HeapFree
HeapAlloc
HeapCreate
HeapDestroy
InterlockedExchangeAdd
HeapSize
GetSystemInfo
GetVersionExW
GetModuleFileNameW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetTickCount
QueryPerformanceCounter
OutputDebugStringA
Sleep
InterlockedExchange
GetSystemTimeAsFileTime
IsDebuggerPresent
DebugBreak
DisableThreadLibraryCalls
GetLastError
WaitForMultipleObjects
InterlockedIncrement
FormatMessageW
GetCurrentProcessId
InterlockedCompareExchange
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
WaitForSingleObject
SetEvent
InterlockedDecrement
CloseHandle
CreateEventW
DelayLoadFailureHook
GetProcAddress
FreeLibrary
LoadLibraryExA
LeaveCriticalSection
GetCurrentProcess
GetModuleHandleExW

Exports

Exports

EapHostPeerBeginSession
EapHostPeerClearConnection
EapHostPeerEndSession
EapHostPeerFreeEapError
EapHostPeerFreeRuntimeMemory
EapHostPeerGetAuthStatus
EapHostPeerGetIdentity
EapHostPeerGetResponseAttributes
EapHostPeerGetResult
EapHostPeerGetSendPacket
EapHostPeerGetUIContext
EapHostPeerInitialize
EapHostPeerProcessReceivedPacket
EapHostPeerSetResponseAttributes
EapHostPeerSetUIContext
EapHostPeerUninitialize

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f2dafba499d107a4dcc444f825ba7eda

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

ntdll

kernel32

Exports

Exports

Sections

.text Size: 43KB - Virtual size: 43KB

.data Size: 3KB - Virtual size: 5KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 43KB - Virtual size: 43KB

.data
Size: 3KB - Virtual size: 5KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 5KB