Ben[.]Demystifier[.]dll | Triage

Sharing

General

Target

Ben.Demystifier.dll
Size

52KB
MD5

a02d729090f64e94eda1ffa39f539667
SHA1

1a97255b0d8996da64b8d464e1964dc7430861b1
SHA256

ea2e1c086a6d2b676511c1a927fa0e2d7b58de8ec10cb5ad4ae0057d247ec72e
SHA512

b0f5d81e86f67ceedef5c04f231cf961a727362b6bda601ffec29bc849d870a8b74781c39b64baef136f54c1153b387c3a94f3ee9874ebb29ad27d2a35533c3f
SSDEEP

768:Qv9BAaRoIaW3sJ06ZvIEx8YZrGrYhebYqUxW+KyOl2POLdRz:QnALI58+6ZPyYIbryW7LlvL3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Ben.Demystifier.dll

Files

Ben.Demystifier.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Ben.Demystifier.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ