f2154448trojan[.]bcryptinject(dropper)[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f2154448trojan.bcryptinject(dropper).dll
Size

101KB
MD5

4269670079c676b38a64d5aa3bd90fe3
SHA1

06169f14ee13b0e5b144cfe34a5bf65af817f7dc
SHA256

5345aa974c78f85d5c263667371239f5a040ff07a8c8584892441f089f9c411a
SHA512

7c27db912f7fc65ec1efd1b5c925294a06ea5a2e1625a53f0355acc8b3f0f50968d93d14e7bd65aa014f396a60efb23730fdc50ac4f3623c78a502bd63d93594
SSDEEP

1536:V1hIyfPlfxRMLB24Q9i5j/dmzZgSnnqzzG3tik/XrOPWKtZC:V1hIyfPlxRMF24+i5j/02uI+E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f2154448trojan.bcryptinject(dropper).dll

Files

f2154448trojan.bcryptinject(dropper).dll
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.text
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 460B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ