MP_VIE[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MP_VIE.dll
Size

3.2MB
MD5

3ce35056fd3ebf0f6be6036d6388105a
SHA1

6880362715b51d41594908af51b594be8fc4b023
SHA256

46ad3ed7d65ab8094097757a157654efaf37c0625946603d88c70d33668374bc
SHA512

334480285b7c4a3feab9584ffedab13627620164ae91d37a513f9c84e371612c85c2eb166ec64401d249ffd5176ea3b89a7745123b1cbd2a15c3fead98d951f8
SSDEEP

49152:MWcOLf2zTASjTxgu4gufguTJ7hMDkfiY2Qeo43:MWcOLf2zT5rHzp3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MP_VIE.dll

Files

MP_VIE.dll
.dll windows:4 windows x86 arch:x86

56f918edd3feaefc7b8df9af992ce1f1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

free
_initterm
malloc
_CIpow
__dllonexit
_onexit
_ftol
_adjust_fdiv
memset
log
exp
sqrt
cos
sin
calloc
realloc

kernel32

DisableThreadLibraryCalls

Exports

Exports

MP_VIE_Create
MP_VIE_GetConfig
MP_VIE_GetMemSize
MP_VIE_Process
MP_VIE_SetConfig

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ