NSCipher[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NSCipher.dll
Size

552KB
MD5

dfe62ecc16a71ae5a2a2bf40d7ee8806
SHA1

02551df445a6e7a2221c2430c82308739c1a8de3
SHA256

419f1a058307b6070496cedb49a6c91854d26124ccc9a9eb83bc71043472abff
SHA512

df8fa5f8a07cd31c32fb752bfdb8066b0bcd74b5857a2443f9ee22ff4c7cc736edcd18852c73090e6fe363d18871f0d9c05ec19897fc0f64cdc8bad6dcb502f0
SSDEEP

12288:bxhJ78GLxpBi7FIUKAO24f7VBt2lqnuq:FxjTml+uq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NSCipher.dll

Files

NSCipher.dll
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

T7RO2h2Osa
VlA8Y983Dz
bmjZA3227r
fs6w6Ke0Jp
hXUP7l3j3V
pi8KE6rYC0
q2Y7P1jB9X
tL4MJ9wW26
tQ5x7S6Nlk
v8SqD67Ns1

Sections

CODE
Size: 462KB - Virtual size: 462KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 263B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ