Static task
static1
Behavioral task
behavioral1
Sample
Spire.License.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Spire.License.dll
Resource
win10v2004-20240508-en
General
-
Target
Spire.License.dll
-
Size
54KB
-
MD5
8ff54337562a85c06527b64adbeac31a
-
SHA1
dd066c166d4acc7f4b2a69ceddd803ca694bfabc
-
SHA256
8eca57a7da62b2f27ced21ea0e787eb5573d4eb0308923cca0d33932273f6ca8
-
SHA512
66e33d73602b86b0bf81c382faabed0d026eb79d9f5e14b362621da28b3cea55e4172c4b65d66fefc5db89359ad3544611f71e47a3647d55baf31dcc84df3470
-
SSDEEP
1536:nFmhXtEUQOEIEvhsYeytJRV2YwCxbxepxXxzT0P:nF63VErhsYeytJRlnhYVJ0P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Spire.License.dll
Files
-
Spire.License.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 864B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ