d66aaa304f7c08ab7e8834751fdaa5cfd3ce345a37c5f22afae8af4ef9aac7f3[.]dll | Triage

Sharing

General

Target

d66aaa304f7c08ab7e8834751fdaa5cfd3ce345a37c5f22afae8af4ef9aac7f3.dll
Size

1.8MB
MD5

55247b534675a528105240efa4b7cf66
SHA1

b0a7de3bed326dd744f3c2ae6cbeb0ba41f03be0
SHA256

d66aaa304f7c08ab7e8834751fdaa5cfd3ce345a37c5f22afae8af4ef9aac7f3
SHA512

68a4f192e61a7a0fa471962656461b55e141d06758d362913d586151c46f3bcd8a287483e15bf1213ea6c35d0f827715ba4e968e5aa8fbccb5d347d65116b9e7
SSDEEP

24576:Bs78YT/h+mQlLdZV+H8gsYaZb8eEYc6gMMoEqwltvGE6+MAjYW29k77/3JWiwkOO:Ba4BTjb5i6VNC7jrpEWP7zNrOiMO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d66aaa304f7c08ab7e8834751fdaa5cfd3ce345a37c5f22afae8af4ef9aac7f3.dll

Files

d66aaa304f7c08ab7e8834751fdaa5cfd3ce345a37c5f22afae8af4ef9aac7f3.dll
.dll windows:6 windows x64 arch:x64

ecb712bfe0d1558ffce8f8c2df526278

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
VirtualQuery
VirtualFree
VirtualAlloc
SetLastError
VirtualProtect
IsBadReadPtr
LoadLibraryA
GetProcAddress
FreeLibrary
GetNativeSystemInfo
HeapAlloc
GetProcessHeap
HeapFree

Sections

.text
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ