523[.]dll | Triage

Sharing

General

Target

523.dll
Size

367KB
MD5

1df65cbb983133a99eaad06298b27217
SHA1

42ef3261cf3b1af1af9e223ec97638a5716695a0
SHA256

6fa1c2a28342f16eefd5c43e023271d8eba007a3a60f0600874bfd8015007b2f
SHA512

a68784cd8ae4d4b7785260c1ad93d4c0b25ee133aada5ba31d2b4c9d09b0d73941fabf686827ac03e9c24e90cfef5d2d4dc92fa9d0860dd405be985824fd5c63
SSDEEP

6144:jsUHrL2Q/5x+tbtnusUi4QxFg1SOm70b9FuhhCxsZgzmI/LkSxDk7r6cx1:7L2Q/5x3rSg1mobcCxsZimIDpDk7dx1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
523.dll

Files

523.dll
.dll windows:6 windows x86 arch:x86

42994be437f309f1728491d080f3fd27

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntdll

qsort
bsearch

kernel32

VirtualFree
IsBadReadPtr
LoadLibraryW
SetLastError
HeapAlloc
HeapFree
GetProcessHeap
ExitProcess
VirtualAlloc
VirtualProtect
VirtualQuery
FreeLibrary
GetProcAddress
LoadLibraryExA
LoadLibraryA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 359KB - Virtual size: 358KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ