Lightshot[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Lightshot.dll
Size

89KB
MD5

0fd9c996e167a6958c2a1921cdc4f404
SHA1

87431893dd1104e2caab56afef2a92985366b8dd
SHA256

be67092ff0fa96f3b3bfc478d4c69c0b90bc7a0aad363c30ee021db48b9fd6ae
SHA512

71d9a78b6f3df811aac36755defe8b53e11118448ead48b84481f57fc7b20ec6b3cd2164b1e2986f7dab7d233f031bc6cda3d808ab9eb965754063b06d29bb5c
SSDEEP

1536:LgV47Ao7rCorOaa6a8G67dEVohCo8JvxMjNTF8Z4JKOZXw/9:UCU4rCorOxV76ZqohCo8JpMjT8SlU9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Lightshot.dll

Files

Lightshot.dll
.dll regsvr32 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DebugConnectWide
DebugCreate
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
KSFFInit
KSFFUninit
KSInit
KSOptions
KSPromptForKey
KSSetKeyInfo
KSSetOption
KSUninit
KSUpdate
__stack_chk_fail
__stack_chk_guard

Sections

CODE
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ