65cdbf5781154ff4b6a28378f05e7f7463c33d6057bad1b894af765be9eaa42e[.]dll | Triage

Sharing

General

Target

65cdbf5781154ff4b6a28378f05e7f7463c33d6057bad1b894af765be9eaa42e.dll
Size

1.7MB
MD5

2503a94dba36465d8e985b8e5abe3d42
SHA1

ffd74fe1fb5f4aea861e11c11b8575656f511193
SHA256

65cdbf5781154ff4b6a28378f05e7f7463c33d6057bad1b894af765be9eaa42e
SHA512

c4c4570873ae1029e23c3fd947e85a9c59208a17da422b9aae850c10a295658637c29314b050e12b115de3f4d9e3c3c970338404611871da6a358c3cf77472f3
SSDEEP

49152:k2CUxPFTXXapomMtatpHx9lzqUcKmdo8+usr/id:k2CCXwMtW9lzhSo5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65cdbf5781154ff4b6a28378f05e7f7463c33d6057bad1b894af765be9eaa42e.dll

Files

65cdbf5781154ff4b6a28378f05e7f7463c33d6057bad1b894af765be9eaa42e.dll
.dll windows:6 windows x64 arch:x64

ecb712bfe0d1558ffce8f8c2df526278

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
VirtualQuery
VirtualFree
VirtualAlloc
SetLastError
VirtualProtect
IsBadReadPtr
LoadLibraryA
GetProcAddress
FreeLibrary
GetNativeSystemInfo
HeapAlloc
GetProcessHeap
HeapFree

Sections

.text
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ