ovisetup (2)[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

ovisetup (2).dll
Size

10.2MB
MD5

bc14f6d87f99da4091405c5109742782
SHA1

34498c8b6b7ec22c30ca2b02ed17555886c22de8
SHA256

c285483da7fdfb360b16ff129a733eed20d30b4f5234798685de98dd9965a892
SHA512

9e8e667ce239af4759025d00ca37a89a9637866af6491e42bc877020b2d4d6f1b1cdf828201a88f6ef753b2ec9ec18cef0f4f1ffd3165ea545027ea94e31ae84
SSDEEP

196608:5dQ9yStloZ4SmF9Bz2M9mEAVIubysnW6Pq3X7nXhHXfdMFMo/5xiI8:OVjBCAmEAG8YXhHvdMFBxwI8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ovisetup (2).dll

Files

ovisetup (2).dll
.dll windows:6 windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

a0d80c2b4744bb286144762220226321
a11e3f6f694cdad2b3c12abe8353ebc6
a812902c47d3cf9aa9bb9f8723efc64c
ab1bf35968cf4962ca2821656ed9a764
b31d032cfdcf47a399990a71e43c5d2a
b422f727a7539eaad0164eb43fc012e0
bb74baf9a32ef73e2e49faa2c9076f24
bca5dbb75b447315cfd298b817a041b5
bd28f02e8d6b678c395300c32c8a9959
c0f2ee7c2b21afffc7ff91815942a77f
c238dce9db68fc15aecfb5c02e1c2f67
c2465a17cfa162e4ecd88cbf41157a6c
c47980282dd1dabfe777a42b44fe6929
c8ccd4f6f72491a037b58742b9d1143c
c942c5ce22f14f22819bf7152a121884
c9791826da23403ec5075672d9e6ef66
c9d4d01ba0e6d49ffe9a5b6f17c8d7a8
cb98a7985ef622420f70243bf5550db3
ced0063a3279def0739c01fdaa15afc2
d63d0e21fdc05f618d55ef306c54af82
d93c9d8ef9feec030660d85f8de7fb1f
dd745d3953658bdfed3f7135a2a58e73
de2d0c0edf158e84bba958a74b345e44
e0326c2e544878febfbd8670a46d8090
e29dd7309fe40ba7f2dc1c3287fbc290
e38eb544cabd9e60c82410a4ce5b74f8
e8f0aad77c93ac3ebff67a4c18c60848
ea51b35b238a4139dc45a5ab9daae5d7
ec63d135ff7817e1a2b625676a2ef703
f5e1c836476fde8287cf16b4e6657295
f6410f8fc76ebd2883a468fdace871c5
fc666666bd301fefb45f47c082951986
fc8cc3b771c477f0ec4f4c987366a7fb
gd22c118b36c4800f23bce730b48866b
i5e469e17c7d2d72f8a64a3f50aa177c
pe185265bb6b006fd90f1aa39dcda5d9
u8cd4da22a687d3c9d86b6f61f9b6138

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rb_ui
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.stbtext
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 399KB - Virtual size: 398KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 263KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rb_rdt
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.edata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.themida
Size: - Virtual size: 14.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.boot
Size: 7.7MB - Virtual size: 7.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 16B - Virtual size: 4KB

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.rb_ui Size: 138KB - Virtual size: 137KB

.stbtext Size: 32KB - Virtual size: 31KB

.rdata Size: 399KB - Virtual size: 398KB

.data Size: 24KB - Virtual size: 263KB

.pdata Size: 52KB - Virtual size: 51KB

.rb_rdt Size: 79KB - Virtual size: 78KB

_RDATA Size: 512B - Virtual size: 244B

.rsrc Size: 1024B - Virtual size: 656B

.reloc Size: 4KB - Virtual size: 3KB

.edata Size: 2KB - Virtual size: 4KB

.idata Size: 512B - Virtual size: 4KB

.tls Size: 512B - Virtual size: 4KB

.themida Size: - Virtual size: 14.6MB

.boot Size: 7.7MB - Virtual size: 7.7MB

.reloc Size: 16B - Virtual size: 4KB

.text
Size: 1.8MB - Virtual size: 1.8MB

.rb_ui
Size: 138KB - Virtual size: 137KB

.stbtext
Size: 32KB - Virtual size: 31KB

.rdata
Size: 399KB - Virtual size: 398KB

.data
Size: 24KB - Virtual size: 263KB

.pdata
Size: 52KB - Virtual size: 51KB

.rb_rdt
Size: 79KB - Virtual size: 78KB

_RDATA
Size: 512B - Virtual size: 244B

.rsrc
Size: 1024B - Virtual size: 656B

.reloc
Size: 4KB - Virtual size: 3KB

.edata
Size: 2KB - Virtual size: 4KB

.idata
Size: 512B - Virtual size: 4KB

.tls
Size: 512B - Virtual size: 4KB

.themida
Size: - Virtual size: 14.6MB

.boot
Size: 7.7MB - Virtual size: 7.7MB

.reloc
Size: 16B - Virtual size: 4KB