PublicLibrary[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PublicLibrary.dll
Size

121KB
MD5

6e962e68293f48740b23f38a6b484308
SHA1

517f12cc60fb219525b92dc6a3dafd33147a1ae7
SHA256

1c83928beced802f312407748e63adf32ce0d2d107b69f49e1c4e3e017435540
SHA512

e87f2b616dee5c6d0c08dc695e6365e6d35cf56bb25a49e43669e3c142f54fe8306911611956b514c0c6e0214e33c192e58c3251facf0267624f7ac169a964e6
SSDEEP

3072:zhVQuBA9oonOslSJq9yykT8rqsoSvnFCw100fyOI:tVd+2oMwPX0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PublicLibrary.dll

Files

PublicLibrary.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Decrypt_Des
EncryptPassword
Encrypt_Des
Encrypt_SHA

Sections

CODE
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 150B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ