veLoginLib[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

veLoginLib.dll
Size

194KB
MD5

9df68b3398b92dd177a4f1ed58d0c9cf
SHA1

97ea65e26d74f05657897103cc23159288bcdd70
SHA256

b0576a1f915185d9c7fe803e6fdfa0edd1f8bf0280c5545df4d7ccbbfcbe7cac
SHA512

be84350f931313f25862a85701acf680b9fa891c39e7d7392abd6fa0956c6468b17524902e13ef59a3654d38a695933e43ededd8f4a5c2bbffbd012ab6871e2b
SSDEEP

1536:OWf9nEhEg/TuTuJtXtCTy+0qPeGwRj6sLXZKtdKUOSsqmxgctrpidKCdM3yZv56F:z1EhEW6TAtn+00MheOXqmxdiwCS3yQt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
veLoginLib.dll

Files

veLoginLib.dll
.dll regsvr32 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 297B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 167B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ