orancds12[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

orancds12.dll
Size

8KB
MD5

286f99cdd59951d93e24fb78fbb3baea
SHA1

a52060da5d54eb9e5e66bf270bf4dd4d6d60d0ee
SHA256

953a4a6d0709b5c1a1a8add9a86b12e0dcb0d548cd1df5d0f5bca6f52904c413
SHA512

25864f95f376133e31aef75199c79b4523ae7b500c2cc46edca3975d2be801f440a48c62f80e094b9fe251b1cd017a32452f8f84337705be0766bb55c390cebe
SSDEEP

96:dZ8lllllllllHqXl6ZOxKL+zUtIEvQWX00e4aX3X5YXD3U/6u:n2qAA6+zUQs0V4aX3X56DEyu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
orancds12.dll

Files

orancds12.dll
.dll windows:5 windows x64 arch:x64

8c8752f438f8e81333391aca709e653a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\ADE\aime_1\oracle\network\bin\orancds12.dll.pdb

Imports

msvcr100

__clean_type_info_names_internal
_unlock
__CppXcptFilter
_lock
_onexit
__C_specific_handler
_amsg_exit
_encoded_null
free
_initterm_e
_initterm
__dllonexit
_malloc_crt

orauts

Sleep
GetCurrentThreadId

kernel32

DisableThreadLibraryCalls
DecodePointer
EncodePointer
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
QueryPerformanceCounter

Exports

Exports

nnfdboot

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ