WcnEapPeerProxy[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

WcnEapPeerProxy.dll
Size

20KB
MD5

e0fc6700e341a2026c08df29a9b4fead
SHA1

b674f3a104ef4ff959a743e7595910187b663b7f
SHA256

edc4cbcb665b6cbaa9d130f22759b09adbf6825fd5626aac9aa3e80b924f449a
SHA512

36da65ee79a29cb7149f1f6db38f2282d46ac942692a1a747c9a55a6413598c480cadbee703ffe4567a1124b66c429ea61ab5b86c8f9028ac68aefb7be8370b4
SSDEEP

384:ppMN2VO4djQxGb9ebAyoguiRpz+ox6q+Ay7pHCWwzWXvBWwDF:nf1iGbk+yt5ykWVvbF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WcnEapPeerProxy.dll

Files

WcnEapPeerProxy.dll
.dll windows:6 windows x86 arch:x86

f3b1928fecc745b4aa51ace0baeb9b4c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

WcnEapPeerProxy.pdb

Imports

msvcrt

_except_handler4_common
memset
memcpy
??0exception@@QAE@XZ
?what@exception@@UBEPBDXZ
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
free
_CxxThrowException
_callnewh
_onexit
_lock
__dllonexit
_unlock
__CxxFrameHandler3
??1type_info@@UAE@XZ
_amsg_exit
_initterm
_XcptFilter
malloc

ntdll

EtwGetTraceEnableFlags
EtwGetTraceEnableLevel
EtwGetTraceLoggerHandle
EtwRegisterTraceGuidsW
EtwUnregisterTraceGuids
EtwTraceMessage
EtwEventRegister
EtwEventUnregister
EtwEventWrite

rpcrt4

NdrClientCall2
RpcStringBindingComposeW
RpcBindingFromStringBindingW
RpcEpResolveBinding
RpcMgmtInqServerPrincNameW
UuidCreate
RpcExceptionFilter
RpcSmDestroyClientContext
RpcBindingFree
RpcStringFreeW
RpcBindingSetAuthInfoExW

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter
GetLastError
UnhandledExceptionFilter

api-ms-win-core-interlocked-l1-1-0

InterlockedExchange
InterlockedCompareExchange

api-ms-win-core-libraryloader-l1-1-0

DisableThreadLibraryCalls

api-ms-win-core-misc-l1-1-0

Sleep
LocalFree
LocalAlloc

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId
TerminateProcess
GetCurrentProcess
GetCurrentThreadId

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetTickCount

api-ms-win-security-base-l1-1-0

CreateWellKnownSid

Exports

Exports

EapPeerFreeErrorMemory
EapPeerFreeMemory
EapPeerGetInfo
EapPeerGetMethodProperties

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f3b1928fecc745b4aa51ace0baeb9b4c

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

ntdll

rpcrt4

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-interlocked-l1-1-0

api-ms-win-core-libraryloader-l1-1-0

api-ms-win-core-misc-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-security-base-l1-1-0

Exports

Exports

Sections

.text Size: 15KB - Virtual size: 15KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 15KB - Virtual size: 15KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB