haspvlib_82199[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

haspvlib_82199.dll
Size

1.0MB
MD5

563d3de16f92aabe6096eb5ce70edf9d
SHA1

bbdd4a913979a56d339fd626f09b40af5f2cbbad
SHA256

1ebba4b03d5899f91fb537c88f701a7692e71431185c030ae40afd165654b2f8
SHA512

c1f86ec791761292236fb7a41b3482b06efaad8ffb0f352a80fc5952111dc198060f7104d94d3537e3f67f481b04fb9fa1470e90e888bfa7a95c4eee4c5c73b0
SSDEEP

24576:mgOJCPmZqRNmv0pA/ry5QG/LmdY9wjH6M14ntIbXa:mFcPnXpATJY9K/mntIu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
haspvlib_82199.dll

Files

haspvlib_82199.dll
.dll windows:4 windows x86 arch:x86

c51fdaba290bd806c936c3d35a60aa59

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

GetACP

advapi32

RegCloseKey

Exports

Exports

vli_get_version
vli_init
vli_shutdown

Sections

.sect0
Size: - Virtual size: 1.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sect2
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.protext
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.prodata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE