home

libeay32.dll

The OpenSSL Toolkit

The OpenSSL Project, http://www.openssl.org/

libeay32.dll is the libeay32.dll binary is part of the OpenSSL Project used to implement Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols for the included program. The file has been seen being downloaded from www.download.drugvokrug.ru.
Publisher:
The OpenSSL Project, http://www.openssl.org/

Product:
The OpenSSL Toolkit

Description:
OpenSSL Shared Library

Version:
1.0.2e

MD5:
556b73b1be55941d3d85402c5f346eca

SHA-1:
a8b8abc08631f7352a0408ffa6c4b06d488ca5d3

SHA-256:
9deea6bdb0cb70f45bb3b62c0c26d89e8caf9bdde757b823e6ddeb1ba741cc87

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 7:50:15 AM UTC  (today)

File size:
1.3 MB (1,372,592 bytes)

Product version:
1.0.2e

Copyright:
Copyright © 1998-2005 The OpenSSL Project. Copyright © 1995-1998 Eric A. Young, Tim J. Hudson. All rights reserved.

Original file name:
libeay32.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\libeay32.dll

File PE Metadata
Compilation timestamp:
12/4/2015 5:23:02 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
12.0

CTPH (ssdeep):
24576:aP9+KpPbJURWB6vdFwQfPmdIhYB+YCUZ82hM59f2WXRH52tPJJfURdQn7s54G:CDJURJKb8kWBzXx52tPJJcRdQnY54G

Entry address:
0x13A000

Entry point:
60, E8, 00, 00, 00, 00, 5D, 8B, C5, 81, ED, CE, B2, 01, 20, 2B, 85, 35, BA, 01, 20, 89, 85, 31, BA, 01, 20, B0, 00, 86, 85, 66, BC, 01, 20, 3C, 01, 0F, 85, BC, 01, 00, 00, 83, BD, 61, BB, 01, 20, 00, 74, 33, 83, BD, 65, BB, 01, 20, 00, 74, 2A, 8B, 85, 31, BA, 01, 20, 2B, 85, 61, BB, 01, 20, 8B, 00, 89, 85, 9E, BB, 01, 20, 8B, 85, 31, BA, 01, 20, 2B, 85, 65, BB, 01, 20, 8B, 00, 89, 85, A2, BB, 01, 20, EB, 61, 83, BD, 69, BB, 01, 20, 00, 74, 58, 8B, 85, 31, BA, 01, 20, 2B, 85, 69, BB, 01, 20, FF, 30, 8D, 85...
 
[+]

Packer / compiler:
ASPack v1.08.04

Code size:
832.5 KB (852,480 bytes)

The file libeay32.dll has been seen being distributed by the following URL.

http://www.download.drugvokrug.ru/bt/_win/.../libeay32.dll

Scan libeay32.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.