Desencoder[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Desencoder.dll
Size

96KB
MD5

05695e541009757d65a8909f879708b5
SHA1

0a14d7cd9e3d8d5ec3921c5ece6be6a114c89f8e
SHA256

365e0fe16cd021a3c478310b63ee2d4589b7d3e898a21d6a0de5658305bb9210
SHA512

921aa91a429a57b2116b558140b9fae779805d6589d9ed7348c9ced92e3c7d9dc5aa82329ddec2e0fd050c8c65c986976371df60727c748f313f465e612c71c7
SSDEEP

1536:KOIvLq8BQi9a9Dc0JpBXJlY1vNm8Ejhv/xL4ZEPFDjGte2Fb9UycbHFSz2892:srLOgAXLSvo8Ejhv/eZEPFDjGtdFbyfV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Desencoder.dll

Files

Desencoder.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DecodeData
EncodeData
HashAndEncode

Sections

CODE
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 121B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ