DelphiDll[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DelphiDll.dll
Size

900KB
MD5

f064b9192ebd36588d22014342694573
SHA1

8c8cc389cb57ccc337269010321de33acd1fcea8
SHA256

e3b1ebc21f988a67dcbe431ef1c90d63c2b9a5c0087d579226246adbdd5974a4
SHA512

362821ea80de4a186a1f84d32e3f013e6d8df7a56b9ddcaea45228edac23cb466ca9135048bd96ce61daddc17131c322eac450458509ee2122dfa60e91a920ac
SSDEEP

12288:nn97vYZNxymcnEICXRGj4fvHTU47OqIFD3LTP7o4V92/Vvi0DhQ8sMhj7Id:nn9EnYChaAvD7yF3bsvJ1lI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DelphiDll.dll

Files

DelphiDll.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DelphiCallC
DelphiCallCSharpDll
Delphi_Call
Delphi_Init
Delphi_SetParams
Delphi_Show
DownloadAttach
GetValidateCode
SetMainHandle

Sections

CODE
Size: 783KB - Virtual size: 782KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 274B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ