DelphiDll2[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DelphiDll2.dll
Size

895KB
MD5

48b65e9b77ec0b65cabf0836859c96a7
SHA1

f2cbc6747966b1accbe6daef271db7272d37c52c
SHA256

9b6728989ab1a36ec39f6fdefa16147bd7645bd17b118ce442d5898d2613108e
SHA512

c02d1412c39199c1f935fb220d878db58415602be8b400087f7455145cf0c0bf392d23de61e4c1047abb2c78b5f1109dbd49af43ceb87467740380a58fd7eae5
SSDEEP

12288:w+UyoX06KxC6ZYV9IkTbPQIoIRBJNtm+92iMrwEftcQhwCtRjQuUtRPea/D5i6fp:LnwAxzYbIkTToiBJG+5CTgE/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DelphiDll2.dll

Files

DelphiDll2.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DelphiCallC
DelphiCallCSharpDll
Delphi_Call
Delphi_Init
Delphi_SetParams
Delphi_Show
GetValidateCode
SetMainHandle

Sections

CODE
Size: 778KB - Virtual size: 778KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 249B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ