home

ssleay32.dll

The OpenSSL Toolkit

The OpenSSL Project, http://www.openssl.org/

ssleay32.dll is the OpenSSL Toolkit used to implement Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols for the included program. SSLeay is designed to provide cryptographic support functionality for SSL connections. The file has been seen being downloaded from www.download.drugvokrug.ru.
Publisher:
The OpenSSL Project, http://www.openssl.org/

Product:
The OpenSSL Toolkit

Description:
OpenSSL Shared Library

Version:
1.0.2e

MD5:
c3c24920b0c918877876c30d8d8425f3

SHA-1:
745574a3f3e315b3d296ef091d81a8ee3649aea3

SHA-256:
01a3eb567363ae9863c3ae1057ffba619c0eab3853854619431c644200ec89df

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 7:33:19 AM UTC  (today)

File size:
399.5 KB (409,078 bytes)

Product version:
1.0.2e

Copyright:
Copyright © 1998-2005 The OpenSSL Project. Copyright © 1995-1998 Eric A. Young, Tim J. Hudson. All rights reserved.

Original file name:
ssleay32.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\ssleay32.dll

File PE Metadata
Compilation timestamp:
12/4/2015 5:23:25 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
12.0

CTPH (ssdeep):
12288:xhaaA+7jyqjS+XTz8XXJ09DY2wNd4FK/TabFff2U+s2f10GTfG+M1G/SkCN8ZzWk:xhVATMe0GTfG4SkG8Jpc4s54V

Entry address:
0x4C000

Entry point:
60, E8, 00, 00, 00, 00, 5D, 8B, C5, 81, ED, CE, B2, 01, 20, 2B, 85, 35, BA, 01, 20, 89, 85, 31, BA, 01, 20, B0, 00, 86, 85, 66, BC, 01, 20, 3C, 01, 0F, 85, BC, 01, 00, 00, 83, BD, 61, BB, 01, 20, 00, 74, 33, 83, BD, 65, BB, 01, 20, 00, 74, 2A, 8B, 85, 31, BA, 01, 20, 2B, 85, 61, BB, 01, 20, 8B, 00, 89, 85, 9E, BB, 01, 20, 8B, 85, 31, BA, 01, 20, 2B, 85, 65, BB, 01, 20, 8B, 00, 89, 85, A2, BB, 01, 20, EB, 61, 83, BD, 69, BB, 01, 20, 00, 74, 58, 8B, 85, 31, BA, 01, 20, 2B, 85, 69, BB, 01, 20, FF, 30, 8D, 85...
 
[+]

Packer / compiler:
ASPack v1.08.04

Code size:
214.5 KB (219,648 bytes)

The file ssleay32.dll has been seen being distributed by the following URL.

http://www.download.drugvokrug.ru/bt/_win/.../ssleay32.dll

Scan ssleay32.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.