O9RzLmelxDjurcO[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

O9RzLmelxDjurcO.dll
Size

7.6MB
MD5

da4b1659ad4c15525fbbd6e1510de3bf
SHA1

a58f098b773647cbb0cafcc9a5dee5712307566f
SHA256

9b43678f49e5bbd159ad0ea807dbdd67cc9bd51e6fd11dcce99de43c027f31bb
SHA512

6b11bf071f708a8fbaba2131de39eba474bca037a27bb2e7e070edb68148cabed0bcfd6112ee22a4d0de75f84c9b6f3d1d5525122f2c1ff09784d1e3cd6a004c
SSDEEP

196608:I6TGUEEl5T+LbXHFbfuOii+OQrvJQyNBUkkMjf+yzk0EZm:fT9EEyLb5V+/rBQyzUkVfTzLam

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
O9RzLmelxDjurcO.dll

Files

O9RzLmelxDjurcO.dll
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.sbss
Size: 828KB - Virtual size: 828KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.srdata
Size: 340KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 808KB - Virtual size: 808KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.srdata
Size: 808KB - Virtual size: 808KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.srdata
Size: 908KB - Virtual size: 908KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE